Lucene search

K
osvGoogleOSV:GO-2021-0240
HistoryFeb 17, 2022 - 5:33 p.m.

Panic when reading certain archives in archive/zip

2022-02-1717:33:25
Google
osv.dev
17

7.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.8%

NewReader and OpenReader can cause a panic or an unrecoverable fatal error when reading an archive that claims to contain a large number of files, regardless of its actual size.

CPENameOperatorVersion
stdlibge1.16.0-0
stdliblt1.15.13
stdliblt1.16.5