Skip to content
OpenAdvisories

Package · Go

github.com/u-root/u-root

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2020-7669

    Arbitrary File Write via Archive Extraction (Zip Slip)

    This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.

    github.com/u-root/u-root Go
  • High 7.5
    CVE-2020-7665

    Arbitrary File Write via Archive Extraction (Zip Slip)

    This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.

    github.com/u-root/u-root Go