CVE-2023-28105

Name of the Vulnerable Software and Affected Versions go-used-util versions prior to 0.0.34

Description The issue is a ZipSlip problem that occurs when using the fsutil package to unzip files. This can lead to path traversal when users use zip.Unzip to unzip zip files from a malicious attacker.

Recommendations For versions prior to 0.0.34, upgrade to version 0.0.34 or above to fix the issue. As a temporary workaround, consider avoiding the use of the zip.Unzip function from the github.com/dablelv/go-huge-util/zip package until the upgrade is applied.