Skip to content
OpenAdvisories

Package · NuGet

Zio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.8
    GHSA-h39g-6x3c-7fq9

    Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment

    # Summary `SubFileSystem` fails to confine operations to its declared sub path when the input path is `/../` (or equivalents `/../`, `/..\\`). This path passes all validation but resolves to the root of the parent filesystem, allowing directory level operatio…

    Zio NuGet