Skip to content
OpenAdvisories

Package · Go

github.com/cyphar/filepath-securejoin

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium —
    GHSA-6xv5-86q9-7xr8

    SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

    ### Impact For Windows users of `github.com/cyphar/filepath-securejoin`, until v0.2.4 it was possible for certain rootfs and path combinations (in particular, where a malicious Unix-style `/`-separated unsafe path was used with a Windows-style rootfs path) to…

    github.com/cyphar/filepath-securejoin Go