Vendor/product archive

sas / go_rpm_utils CVEs

Beta · best-effort

1 CVEs tagged to sas / go_rpm_utils — 0 Critical, 1 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to sas vendor archive

CVE-2020-7667

Published Jun 24, 2020

In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-lea…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1