CVE-2020-26283 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Low
Remote	Yes
Type	Content spoofing
Description	In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action. This is fixed in version 0.8.0.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1735	go-ipfs	0.7.0-1	0.8.0-1	Medium	Fixed	FS#70152

References
https://github.com/ipfs/go-ipfs/security/advisories/GHSA-r4gv-vj59-cccm https://github.com/ipfs/go-ipfs/pull/7831 https://github.com/ipfs/go-ipfs/commit/fb0a9acd2d8288bd1028c3219a420de62a09683a