github.com/schollz/croc/v9 vulnerabilities
CVEs whose affected-version data names the github.com/schollz/croc/v9 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2023-43621Medium· 4.7Croc may expose secret to local users
Croc may expose secret to local users
▾ Sunlitschollz · github.com/schollz/croc/v9EPSS 0.31%via OSV
CVE-2023-43618Medium· 5.3Croc requires senders to provide local IP addresses in cleartext
Croc requires senders to provide local IP addresses in cleartext
▾ Sunlitschollz · github.com/schollz/croc/v9EPSS 0.49%via OSV
CVE-2023-43620High· 7.8Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device
▾ Twilightschollz · github.com/schollz/croc/v9EPSS 0.36%via OSV