Skip to content
OpenAdvisories

Package · Go

github.com/u-root/u-root/pkg/cpio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2020-7666

    Arbitrary File Write via Archive Extraction (Zip Slip)

    This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.

    github.com/u-root/u-root/pkg/cpio Go