Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/08 7:14 p.m.12 views

quarkus-openapi-generator extension has Zip Slip Path Traversal in ApicurioCodegenWrapper class

Summary A path traversal vulnerability was discovered in the quarkus-openapi-generator extension Details The unzip method in ApicurioCodegenWrapper.java extracts ZIP entries without validating that the resolved file path stays within the intended output directory. At line 101, the destination is...

8.7CVSS6.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder