VDB

GCVE-VVD-MAGEIA-2021-475

GCVE-VVD-MAGEIA-2021-475
Advisory Published
Vulnetix · Advisory published October 13, 2021
The fix for CVE-2021-33196 can be bypassed by crafted inputs. As a result, the NewReader and OpenReader functions in archive/zip can still cause a panic or an unrecoverable fatal error when reading an archive that claims to contain a large number of files, regardless of its actual size. (CVE-2021-39293) A security issue has been found in go before version 1.17.2. When invoking functions from WASM modules, built using GOARCH=wasm GOOS=js, passing very large arguments can cause portions of the module to be overwritten with data from the arguments. (CVE-2021-38297)

Affected Products

VendorProductVersionsPlatforms
Mageiagolang0 (affected), 1.17.2-1.mga8 (unaffected)
Oracle Cloudfunctions
Azurefunctions

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›