Security vulnerability scan #397

Annotations

10 errors

persistence.ParseChaincodePackage calls io.ReadAll, which eventually calls internal.chunkedReader.Read

chaincode.Packager.Package calls filepath.Abs

nwo.Network.StartSession calls filepath.Base

externalbuilder.ValidPath calls filepath.Clean

peer.GetServerConfig calls filepath.Dir

persistence.ParseChaincodePackage calls tar.Reader.Next, which calls filepath.IsLocal

nwo.Network.OrdererCert calls filepath.Join

golang.DescribeCode calls filepath.Rel

chaincode.Packager.Package calls filepath.Split

externalbuilder.Start calls exec.Cmd.Start, which eventually calls filepath.VolumeName