blakesmith github.com/blakesmith/ar vulnerabilities

Latest blakesmith github.com/blakesmith/ar CVEs

Newest publication first

1. GO-2026-6905 Panic on negative member size in Reader.Read in github.com/blakesmith/ar

   Published 2026-11-05

   Unknown

   Reader.Next parses the 10-byte decimal size field of an archive member header with strconv.ParseInt without rejecting negative values. A header with a negative size leaves the reader with a negative remaining byte count, causing the subsequent call to Reader.Read to panic with a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.