Description
nothub mrpack-install <= v0.16.2 is vulnerable to Directory Traversal.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/nothub/mrpack-install | < 0.16.3 | 0.16.3 | GHSA-r887-gfxh-m9rr |
High · 8.8
CVE-2023-25307
EUVD-2023-0790GHSA-r887-gfxh-m9rrGO-2023-1543
mrpack-install vulnerable to path traversal with dependency
Published Jun 26, 2023 · Updated Dec 4, 2024 · Assigned by mitre