CVE-2021-41772

7.5

HIGHCVSS v3

Published

November 8, 2021

CVSS v2

5 MEDIUM

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

golang/go

GitHubThe Go programming language

< 1.16.10, >= 1.17.0, < 1.17.3NVD

fedora

Crates.ioBase library for interacting with Fedora web services

= 34, = 35NVD

fedora

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Placeholder for the fedora name

= 34, = 35NVD

fedora

Docker HubOfficial Docker builds of Fedora

= 34, = 35NVD

fedora

NPMDigital Repository Ireland - fedora backend operations

= 34, = 35NVD

fedora

RubyGemsSet of capistrano recipies for automating creation of Fedora servers.

= 34, = 35NVD

Security Advisories

CVE-2021-41772

Description

More on this CVE