Vulnerability Report: GO-2021-0228

Affected Packages

• Path
  Versions
  Symbols
• github.com/unknwon/cae/tz
  before v1.0.1
  9 affected symbols

  • Create
  • ExtractTo
  • Open
  • OpenFile
  • TzArchive.Close
  • TzArchive.ExtractTo
  • TzArchive.ExtractToFunc
  • TzArchive.Flush
  • TzArchive.Open
• github.com/unknwon/cae/zip
  before v1.0.1
  10 affected symbols

  • Create
  • ExtractTo
  • ExtractToFunc
  • Open
  • OpenFile
  • ZipArchive.Close
  • ZipArchive.ExtractTo
  • ZipArchive.ExtractToFunc
  • ZipArchive.Flush
  • ZipArchive.Open

Aliases

• CVE-2020-7664
• GHSA-vpx7-vm66-qx8r

References

• https://github.com/unknwon/cae/commit/07971c00a1bfd9dc171c3ad0bfab5b67c2287e11
• https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUNKNWONCAEZIP-570383
• https://vuln.go.dev/ID/GO-2021-0228.json

Credits

• Georgios Gkitsas of Snyk Security Team

Feedback