GHSA-r4gv-vj59-cccmMediumCVSS 6.8

Control character injection in console output in github.com/ipfs/go-ipfs

Published
June 23, 2021
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-26283 →

📋 Description

Impact

Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action.

Patches

  • Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0

For more information

If you have any questions or comments about this advisory:

🎯 Affected products1

  • go/github.com/ipfs/go-ipfs:< 0.8.0

🔗 References (5)