CVE-2021-39293

CVE-2021-39293 is a high-severity denial-of-service vulnerability affecting Go versions prior to 1.16.8 and 1.17.1, specifically within the archive/zip package. A remote attacker can trigger a panic in NewReader or OpenReader functions by providing a specially crafted archive header that falsely designates a large number of files. This vulnerability has a CVSS score of 7.5, indicating a high impact on availability with low attack complexity and no user interaction required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.