Skip to content
OpenAdvisories

Package · Go

github.com/anchore/stereoscope

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-24579

    Tar path traversal in stereoscope when processing OCI tar archives

    stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1, it is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outsi…

    Anchore stereoscope github.com/anchore/stereoscope Go