Skip to content
OpenAdvisories

Package · crates.io

cap-primitives

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.0
    GHSA-hp8f-xmx4-4qrg

    Paths or symlinks ending in a slash escape the sandbox

    cap-primitives resolves a path inside a sandboxed directory one component at a time and opens the last component with `O_NOFOLLOW`, so that a symlink there cannot lead out of the directory. When the path ended in `/`, the resolver added the slash back to the …

    cap-primitives crates.io