Skip to content
Threat Feed

Tag

Go-Billy

1 brief RSS
high advisory

go-billy Path Traversal Vulnerabilities

Multiple path traversal vulnerabilities exist in go-billy, particularly affecting the `osfs.ChrootOS` implementation, where crafted paths can escape intended base directories due to insufficient path sanitization and boundary enforcement; users requiring stronger security should upgrade to v6 and use `os.Root`.

go-billy/v5 +1 path-traversal go-billy CVE-2026-44973
2r 1t