GHSA-mpq4-rjj8-fjph
Uncontrolled Resource Consumption in github.com/google/fscrypt
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/google/fscrypt | < 0.3.3 | 0.3.3 |
Details
As written in the advisory (Markdown source, shown as plain text).
fscrypt through v0.3.2 creates a world-writable directory by default when setting up a filesystem, allowing unprivileged users to exhaust filesystem space. We recommend upgrading to fscrypt 0.3.3 or above and adjusting the permissions on existing fscrypt metadata directories where applicable.
References
External links from the advisory. They lead to third-party sites.