Description
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Pub | archive | < 3.3.8 | 3.3.8 | GHSA-9v85-q87q-g4vg |
High · 7.8
CVE-2023-39139
EUVD-2023-2265GHSA-9v85-q87q-g4vg
Path traversal in Archive
Published Aug 30, 2023 · Updated Oct 1, 2024 · Assigned by mitre