github.com/devfile/registry-support/registry-library

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 8.0

CVE-2024-1485

Registry-support: decompress can delete files outside scope via relative paths

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive an…

Red Hat Red Hat OpenShift Container Platform 4 OpenShift Developer Tools and Services github.com/devfile/registry-support/registry-library Go

Feb 13, 2024