GitHub Advisoryadvisory · Go
GHSA-wxwq-525w-hcqx Yapscan Denial of Service vulnerability in report server
HIGH
Official page ↗
- Ecosystem
- Go
- Packages
- github.com/fkie-cad/yapscan
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Reviewed
- 2023-03-03
Affected packages
• Go github.com/fkie-cad/yapscan: >= 0.18.0, < 0.19.2 → fixed in 0.19.2
Description
Impact
If you use the report server, it may be vulnerable to a Denial of Service attack.
Patches
Has been patched in v0.19.2.
References
The vulnerability was inherited by the following upstream vulnerabilites
• golang.org/x/text < v0.3.7
• golang.org/x/net < 0.0.0-20220906165146-f3363e06e74c
References
- https://github.com/fkie-cad/yapscan/security/advisories/GHSA-wxwq-525w-hcqx web
- https://github.com/fkie-cad/yapscan/pull/46 web
- https://github.com/fkie-cad/yapscan/commit/242b4b25b107deacddd4ca276b45d23e16bb3b88 web
- https://github.com/fkie-cad/yapscan/commit/65f277662c6475eb3f592e0e4fdfee902ecd9326 web
- https://github.com/advisories/GHSA-69cg-p879-7622 advisory
- https://github.com/advisories/GHSA-ppp9-7jff-5vj2 advisory
- https://github.com/fkie-cad/yapscan package
- https://github.com/fkie-cad/yapscan/releases/tag/v0.19.2 web