Skip to content
OpenAdvisories

Vendor

golang

4 known vulnerabilities.

Products

Go 3 archiver 1 Go < 1.19.7 0 Go < 1.20.2 0
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2018-1002207

    Arbitrary File Write via Archive Extraction in mholt/archiver

    mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnera…

    golang archiver github.com/mholt/archiver Go