Security Advisory
CVE-2021-39293
7.5
HIGH
Vulnerability Description
In archive/zip in Go before 1.16.8 and 1.17.x before 1.17.1, a crafted archive header (falsely designating that many files are present) can cause a NewReader or OpenReader panic. NOTE: this issue exists because of an incomplete fix for CVE-2021-33196.
Published Date
January 24, 2022
Official Source
NIST NVD Advisory