CVE-2025-22873

CVE-2025-22873

[Unknown description]

CVE-2025-22873

It was possible to improperly access the parent directory of an os.Roo ...

SUSE-SU-2025:1551-1

Security update for go1.24

SUSE-SU-2025:01551-1

Security update for go1.24

GHSA-p3p7-9h4w-jqw2

It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.