Go Standard Library Compress/Gzip vulnerabilities

1 vulnerability

Known vulnerabilities in Go Standard Library Compress/Gzip, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2022-30631go standard library · compress/gzip +8 moreStack exhaustion when reading certain archives in compress/gzipUncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.CVSS7.5HighEPSS2.19%