CVE-2020-26283

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0, control characters are not escaped from console output. This can result in hiding input from the user which could result in the user taking an unknown, malicious action. This is fixed in version 0.8.0.

• CWE-116

• https://github.com/ipfs/go-ipfs/commit/fb0a9acd2d8288bd1028c3219a420de62a09683aPatch, Third Party Advisory
• https://github.com/ipfs/go-ipfs/pull/7831Patch, Third Party Advisory
• https://github.com/ipfs/go-ipfs/security/advisories/GHSA-r4gv-vj59-cccmThird Party Advisory
• https://github.com/ipfs/go-ipfs/commit/fb0a9acd2d8288bd1028c3219a420de62a09683aPatch, Third Party Advisory
• https://github.com/ipfs/go-ipfs/pull/7831Patch, Third Party Advisory
• https://github.com/ipfs/go-ipfs/security/advisories/GHSA-r4gv-vj59-cccmThird Party Advisory

Published

Mar 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-26278Weave Net is open source software which creates a virtual ne…8
• CVE-2020-26279go-ipfs is an open-source golang implementation of IPFS whic…8.1
• CVE-2020-2628Vulnerability in the Enterprise Manager Base Platform produc…6
• CVE-2020-26280OpenSlides is a free, Web-based presentation and assembly sy…8.9
• CVE-2020-26281async-h1 is an asynchronous HTTP/1.1 parser for Rust (crates…7.5
• CVE-2020-26282BrowserUp Proxy allows you to manipulate HTTP requests and r…10
• CVE-2020-26284Hugo is a fast and Flexible Static Site Generator built in G…8.5
• CVE-2020-26285OpenMage is a community-driven alternative to Magento CE. In…7.2
• CVE-2020-26286HedgeDoc is a collaborative platform for writing and sharing…7.5
• CVE-2020-26287HedgeDoc is a collaborative platform for writing and sharing…8.7
• CVE-2020-26288Parse Server is an open source backend that can be deployed …6.5
• CVE-2020-26289date-and-time is an npm package for manipulating date and ti…7.5