GitHub Advisoryadvisory · Go

GHSA-fgwp-pwqq-g3w4 Bloom Uncontrolled Search Path Element vulnerability

HIGH Published 2023-01-12 Modified 2023-01-20 Official page ↗

Aliases: CVE-2023-0247
Ecosystem: Go
Packages: github.com/bits-and-blooms/bloom
Severity: High
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-427
Reviewed: 2023-01-12

Affected packages

• Go github.com/bits-and-blooms/bloom: < 3.3.1 → fixed in 3.3.1

Description

Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1.

Related

Alias · CVE (1)

CVE-2023-0247 Uncontrolled Search Path Element in GitHub repository bits-and-blooms/bloom prior to 3.3.1. vulnerability

Weakness · CWE (1)

CWE-427 Uncontrolled Search Path Element weakness

References