GHSA-fjgq-224f-fq37
Goa vulnerable to path traversal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/goadesign/goa | < 1.4.3 | 1.4.3 |
| Go | goa.design/goa | < 1.4.3 | 1.4.3 |
| Go | goa.design/goa/v3 | < 3.0.9 | 3.0.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper path santiziation in github.com/goadesign/goa before v3.0.9, v2.0.10, or v1.4.3 allow remote attackers to read files outside of the intended directory
References
External links from the advisory. They lead to third-party sites.