Skip to content
OpenAdvisories

Package · Go

github.com/sassoftware/go-rpmutils

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-7667

    Arbitrary File Write via Archive Extraction (Zip Slip)

    In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading ".." which leads in file extraction outside of the current directory. Note:…

    github.com/sassoftware/go-rpmutils Go