Security vulnerability scan #367

Annotations

10 errors

channelparticipation.doBody calls io.ReadAll, which eventually calls internal.chunkedReader.Read

chaincode.Packager.Package calls filepath.Abs

nwo.Network.StartSession calls filepath.Base

externalbuilder.ValidPath calls filepath.Clean

peer.GetServerConfig calls filepath.Dir

persistence.ParseChaincodePackage calls tar.Reader.Next, which calls filepath.IsLocal

nwo.Network.OrdererClientConn calls filepath.Join

golang.DescribeCode calls filepath.Rel

chaincode.Packager.Package calls filepath.Split

externalbuilder.Start calls exec.Cmd.Start, which eventually calls filepath.VolumeName