GHSA-r4gv-vj59-cccm
Control character injection in console output in github.com/ipfs/go-ipfs
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/ipfs/go-ipfs | < 0.8.0 | 0.8.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action.
### Patches
<!-- _Has the problem been patched? What versions should users upgrade to?_ -->
- Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0
### For more information
If you have any questions or comments about this advisory:
* Open an issue in [go-ipfs](http://github.com/ipfs/go-ipfs)
* Email us at [[email protected]](mailto:[email protected])
References
External links from the advisory. They lead to third-party sites.