CVE-2020-26283

MEDIUM6.8EPSS 0.74%

Control character injection in console output in github.com/ipfs/go-ipfs

Published: 6/23/2021Modified: 3/13/2026

Description

### Impact Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action. ### Patches  - Patched via https://github.com/ipfs/go-ipfs/pull/7831 in v0.8.0 ### For more information If you have any questions or comments about this advisory: * Open an issue in [go-ipfs](http://github.com/ipfs/go-ipfs) * Email us at [[email protected]](mailto:[email protected])

Affected packages (2)

Go/github.com/ipfs/go-ipfsfrom 0, < 0.8.0
Go/github.com/ipfs/go-ipfsfrom 0, < 0.8.0

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.8	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

References (4)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-26283
WEBhttps://github.com/ipfs/go-ipfs/commit/fb0a9acd2d8288bd1028c3219a420de62a09683a
WEBhttps://github.com/ipfs/go-ipfs/pull/7831
WEBhttps://github.com/ipfs/go-ipfs/security/advisories/GHSA-r4gv-vj59-cccm