Goreleaser vulnerabilities
We track 1 vulnerability in Goreleaser products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 30, 2023.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest Goreleaser vulnerabilities
- 7.1 High severity
nfpm: Incorrect Default Permissions
nFPM is an alternative to fpm. The file permissions on the checked-in files were not maintained. Hence, when nfpm packaged the files (without extra config for enforcing it’s own permissions) files could go out with bad permissions (chmod 666 or 777). Anyone us