EUVD-2021-2087

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

SharpCompress versions before 0.29.0 allow path traversal due to incomplete path validation checks.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-39208	16 Sep 202118:22	–	circl
CNNVD	SharpCompress 路径遍历漏洞	16 Sep 202100:00	–	cnnvd
CVE	CVE-2021-39208	16 Sep 202114:35	–	cve
Cvelist	CVE-2021-39208 WriteEntryToDirectory used for an archive extraction is vulnerable to partial path traversal.	16 Sep 202114:35	–	cvelist
Github Security Blog	Partial path traversal in sharpcompress	20 Sep 202119:53	–	github
NVD	CVE-2021-39208	16 Sep 202115:15	–	nvd
OSV	GHSA-JP7F-GRCV-6MJF Partial path traversal in sharpcompress	20 Sep 202119:53	–	osv
Prion	Path traversal	16 Sep 202115:15	–	prion
RedhatCVE	CVE-2021-39208	22 May 202520:44	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "429974d2-0a79-3593-a5ab-0f7e0c301140",
        "vendor": {
          "name": "adamhathcock"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "e2d7bf55-fa33-3c2d-ac51-49abc7bf0a33",
        "product": {
          "name": "SharpCompress"
        },
        "product_version": "< 0.29.0"
      }
    ]
  }
]

Source	Link
github	www.github.com/adamhathcock/sharpcompress/security/advisories/GHSA-jp7f-grcv-6mjf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-39208
github	www.github.com/adamhathcock/sharpcompress/pull/614
github	www.github.com/adamhathcock/sharpcompress/commit/ea5c8dc06314c7a5068e7901c51a625224d2b288
github	www.github.com/adamhathcock/sharpcompress
github	www.github.com/adamhathcock/sharpcompress/releases/tag/0.29.0
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.3

CVSS 24

EPSS0.01154