High 1 exploited CVE DSA-4894-1 1 CVE

php-pear - security update

Published Apr 20, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 10	php-pear	1:1.10.6+submodules+notgz-1.1+deb10u2

Vulnerabilities 1

High 7.5

CVE-2020-36193 Exploited EPSS 71%

Directory Traversal in Archive_Tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

drupal7 php-pear php-pear pear/archive_tar Debian Ubuntu Alpine Packagist

Jan 18, 2021
KEV Aug 25, 2022