CVE-2022-32190
EUVD-2022-5340213.09.2022, 18:15
JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result.Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | go | 1.19.0 |
| golang | go | 1.19.0:beta1 |
| golang | go | 1.19.0:rc1 |
| golang | go | 1.19.0:rc2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-1.10 |
| ||||||||||||||
| golang-1.13 |
| ||||||||||||||
| golang-1.14 |
| ||||||||||||||
| golang-1.16 |
| ||||||||||||||
| golang-1.17 |
| ||||||||||||||
| golang-1.18 |
| ||||||||||||||
| golang-1.6 |
| ||||||||||||||
| golang-1.8 |
| ||||||||||||||
| golang-1.9 |
|