Approved changes feed: RSS · Atom

cpe:2.3:a:go_standard_library:compress/gzip:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGo Standard Library (50bc78d3-15d0-59a4-bc22-a964570e0614)
ProductCompress/Gzip (6755c1dd-3ad4-50f6-82bf-5932619a4ae3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-30631 vulnerable 2026-06-03 14:47:09.326865 Stack exhaustion when reading certain archives in compress/gzip
Uncontrolled recursion in Reader.Read in compress/gzip before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via an archive containing a large number of concatenated 0-length compressed files.
Published: 2022-08-09T20:16:32.000Z
Updated: 2025-10-20T17:51:28.366Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.