Skip to content
OpenAdvisories

Package · Go

github.com/jaredallard/archives

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.0

    archives: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

    archives is a Go library for extracting archives (tar, zip, etc.). Version 1.0.0 does not prevent a malicious user to feed a specially crafted archive to the library causing RCE, modification of files or other malignancies in the context of whatever the user …