Skip to content
OpenAdvisories

Package · Go

github.com/codeclysm/extract

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.9
    CVE-2024-47877

    Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory.

    Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow an attacker to create a symlink outside the extraction target directory. This vulnerability is fixed in 4.0.0. If you're using the Extracto…

    codeclysm extract github.com/codeclysm/extract/v4 github.com/codeclysm/extract/v3 Go