Skip to content
OpenAdvisories

Package · Alpine

diffoscope

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2024-25711

    diffoscope Path Traversal vulnerability

    diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted.

    diffoscope diffoscope diffoscope diffoscope Debian Ubuntu Alpine PyPI