CVE-2026-77156 ast-cli: Path traversal in tar extraction on Linux/macOS allows writes outside the install directory

[
  {
    "vendor": "Checkmarx",
    "product": "github.com/checkmarx/ast-cli",
    "platforms": [
      "MacOS",
      "Linux"
    ],
    "collectionURL": "https://golang.org/pkg",
    "packageName": "github.com/checkmarx/ast-cli",
    "repo": "https://github.com/checkmarx/ast-cli",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.3.51",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "2.3.51",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]