Skip to content
OpenAdvisories

Package · Go

go.rgst.io/stencil

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    go.rgst.io/stencil/v2 vulnerable to Path Traversal

    ### Impact The library used to extract archives (github.com/jaredallard/archives) was vulnerable to the "zip slip" vulnerability. This is used to extract native extension archives and repository source archives. A native extension or repository archive could …