Checkmarx ast-cli path traversal vulnerability

Versions of Checkmarx ast-cli prior to 2.3.51 contain a path traversal vulnerability. This vulnerability stems from insufficient validation of archive entries’ paths within the tar decompression logic; it may allow malicious tar archives containing absolute paths or path traversal entries to writ...

Checkmarx ast-cli encryption issue vulnerability

Checkmarx ast-cli versions 2.3.59 and earlier contain an encryption vulnerability. This vulnerability arises because archives downloaded from download.Checkmarx.com are not verified for checksums prior to decompression and execution. Attackers can replace these archives with arbitrary binaries,...