Skip to content
OpenAdvisories

Package · Hackage

libarchive

1 known vulnerabilities.

1 result · Feed

  • Unscored —

    Arbitrary file write via path traversal in unpackToDir

    # Arbitrary file write via path traversal in unpackToDir `Codec.Archive.unpackToDir` extracts a tar (or other archive supported by the libarchive C library) from a `ByteString` into a directory. `unpackToDirLazy` is the streaming variant; both funnel through …