Security vulnerability scan #368

Annotations

10 errors

persistence.ChaincodePackageParser.Parse calls ioutil.ReadAll, which eventually calls internal.chunkedReader.Read

chaincode.Packager.Package calls filepath.Abs

nwo.Network.StartSession calls filepath.Base

externalbuilder.ValidPath calls filepath.Clean

peer.GetServerConfig calls filepath.Dir

persistence.ChaincodePackageParser.Parse calls tar.Reader.Next, which calls filepath.IsLocal

nwo.Network.CACertsBundlePath calls filepath.Join

golang.DescribeCode calls filepath.Rel

chaincode.Packager.Package calls filepath.Split

externalbuilder.Start calls exec.Cmd.Start, which eventually calls filepath.VolumeName