Lucene search

K
osvGoogleOSV:GHSA-58PF-PCWV-QG85
HistoryMay 18, 2021 - 9:08 p.m.

Path traversal in u-root

2021-05-1821:08:28
Google
osv.dev
8

0.001 Low

EPSS

Percentile

40.1%

This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.

CPENameOperatorVersion
github.com/u-root/u-rootlt0.9.0

0.001 Low

EPSS

Percentile

40.1%

Related for OSV:GHSA-58PF-PCWV-QG85