Re: [go-nuts] Security implications of exposed Go runtime anon pipes

iptor the runtime poller knows what to do. Can you point to a code location in the runtime I could look at to better understand what's going on there? Thanks in advance! Best, Moritz Ian Lance Taylor schrieb am Donnerstag, 9. Januar 2025 um 19:00:54 UTC+1: > On Thu, Jan 9, 2025 at 9:1

[go-nuts] Security implications of exposed Go runtime anon pipes

Hey there! I've recently came across a Go application with an arbitrary file write vulnerability restricted to `/proc/self`. After researching for a little, I've found the following article which exploits such a vulnerability in a NodeJS application, escalating it into remote code execution by