go-bitfield vulnerabilities

1 known vulnerability in go-bitfield from Ipfs. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  go-bitfield: Improper Validation of Specified Quantity in Input

  CVE-2023-23626Feb 9, 2023Ipfs

  go-bitfield is a simple bitfield package for the go language aiming to be more performant that the standard library. When feeding untrusted user input into the size parameter of `NewBitfield` and `FromBytes` functions, an attacker can trigger `panic`s. This ha