internal/safefilepath vulnerabilities

1 known vulnerability in internal/safefilepath from Go standard library. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  path/filepath: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-45283Nov 9, 2023Go standard libraryEPSS 3.35%

  The filepath package does not recognize paths with a \??\ prefix as special. On Windows, a path beginning with \??\ is a Root Local Device path equivalent to a path beginning with \\?\. Paths with a \??\ prefix may be used to access arbitrary locations on the