Description
unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/gen2brain/go-unarr | < 0.1.4 | 0.1.4 | GHSA-v9j4-cp63-qv62 |