Vulnerability GO-2023-2068
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
August 21, 2024 at 02:30 PM UTC
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
v0.1.0 - v3.0.6+incompatible
v0.1.0 - v3.0.6+incompatible
Summary
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Details
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
5 hours ago
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
<=3.0.6 GHSA-x89h-7h96-v88f
<=3.0.6 GHSA-x89h-7h96-v88f
Medium Risk
5 hours ago
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
<=6.4.11 GHSA-x89h-7h96-v88f
<=6.4.11 GHSA-x89h-7h96-v88f
Medium Risk
5 hours ago
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
<=8.6.12 GHSA-x89h-7h96-v88f
<=8.6.12 GHSA-x89h-7h96-v88f
Medium Risk
5 hours ago
croc: Overwrite-confirmation bypass via a crafted "croc-stdin-" filename on receive
<=9.6.17 GHSA-x89h-7h96-v88f
<=9.6.17 GHSA-x89h-7h96-v88f
Unknown
2 years ago
Croc may expose secret to local users in github.com/schollz/croc
v0.1.0 - v3.0.6+incompatible GO-2023-2069
v0.1.0 - v3.0.6+incompatible GO-2023-2069
Impacted packages
Timeline
Published
2 years ago
August 21, 2024 at 02:30 PM UTC
Last Modified
9 months ago
February 04, 2026 at 04:30 AM UTC