Impact

Control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action.

Patches

• Patched via #7831

Workarounds

Upgrade to go-ipfs 0.8.0 or later.

For more information

If you have any questions or comments about this advisory:

• Open an issue in go-ipfs
• Email us at security@ipfs.io