Description
An issue in Archive v3.3.7 allows attackers to spoof zip filenames which can lead to inconsistent filename parsing.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Pub | archive | < 3.3.8 | 3.3.8 | GHSA-r285-q736-9v95 |
High · 7.8
CVE-2023-39137
EUVD-2023-2342GHSA-r285-q736-9v95
Filename spoofing in archive
Published Aug 30, 2023 · Updated Oct 1, 2024 · Assigned by mitre