github.com/schollz/croc/v9
Easily and securely send things from one computer to another :crocodile: :package:
View on Github
Activity
- Latest release
- 2y ago
- Total releases
- 20
- Cadence
- ~21 days
- Last 12 months
- 0
Reach
- Stars
- 40.3k
Details
- First release
- Apr 28, 2022
| Version | Released | |
|---|---|---|
v9.6.17
patch
|
v9.6.17
patch
Dependencies (16)
+ 8 more |
|
v9.6.16
patch
|
v9.6.16
patch
Dependencies (16)
+ 8 more |
|
v9.6.15
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.15
patch
Dependencies (16)
+ 8 more |
|
v9.6.14
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.14
patch
Dependencies (16)
+ 8 more |
|
v9.6.13
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.13
patch
Dependencies (16)
+ 8 more |
|
v9.6.12
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.12
patch
Dependencies (16)
+ 8 more |
|
v9.6.11
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.11
patch
Dependencies (16)
+ 8 more |
|
v9.6.10
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.10
patch
Dependencies (16)
+ 8 more |
|
v9.6.9
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.9
patch
Dependencies (16)
+ 8 more |
|
v9.6.8
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.8
patch
Dependencies (16)
+ 8 more |
|
v9.6.7
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.7
patch
Dependencies (16)
+ 8 more |
|
v9.6.6
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.6
patch
Dependencies (16)
+ 8 more |
|
v9.6.5
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.5
patch
Dependencies (15)
+ 7 more |
|
v9.6.4
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.4
patch
Dependencies (14)
+ 6 more |
|
v9.6.3
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.3
patch
Dependencies (14)
+ 6 more |
|
v9.6.2
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.2
patch
Dependencies (13)
+ 5 more |
|
v9.6.1
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.1
patch
Dependencies (13)
+ 5 more |
|
v9.6.0
minor
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.6.0
minor
Dependencies (13)
+ 5 more |
|
v9.5.6
patch
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.5.6
patch
Dependencies (13)
+ 5 more |
|
v9.5.5
initial
6 CVEs
CVE-2023-43620
GO-2023-2068
GHSA-364c-vvqx-446c
Aug 21, 2024
Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43618
GO-2023-2070
GHSA-7mp6-929p-pqhj
Aug 21, 2024
Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Croc requires senders to provide local IP addresses in cleartext in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43621
GO-2023-2069
GHSA-7g3v-4ggr-xvjf
Aug 21, 2024
Croc may expose secret to local users in github.com/schollz/croc Croc may expose secret to local users in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43617
GO-2023-2072
GHSA-hp56-xvf4-g6wr
Aug 21, 2024
Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Cros secrets may be disclosed to untrusted relay in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43616
GO-2023-2071
GHSA-8c8w-f7wp-2jr2
Aug 21, 2024
Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Sender can cause a receiver to overwrite files during ZIP extraction in Croc in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev
CVE-2023-43619
GO-2023-2073
GHSA-ppjh-xp5v-46wc
Aug 21, 2024
Croc sender may send dangerous new files to receiver in github.com/schollz/croc Croc sender may send dangerous new files to receiver in github.com/schollz/croc Fixed in
9.6.16
References
Updated Feb 04, 2026 · Source: OSV.dev |
v9.5.5
initial
Dependencies (13)
+ 5 more |