RCE via ZipSlip and symbolic links in argoproj/argo-workflows

Summary The patch deployed against CVE-2025-62156 is ineffective against malicious archives containing symbolic links. Details The untar code that handles symbolic links in archives is unsafe. Concretely, the computation of the link's target and the subsequent check are flawed:...

GHSA-XRQC-7XGX-C9VH RCE via ZipSlip and symbolic links in argoproj/argo-workflows

Summary The patch deployed against CVE-2025-62156 is ineffective against malicious archives containing symbolic links. Details The untar code that handles symbolic links in archives is unsafe. Concretely, the computation of the link's target and the subsequent check are flawed:...

Directory Traversal

Overview nicegui is a Create web-based user interfaces with Python. The nice way. Affected versions of this package are vulnerable to Directory Traversal via the addmediafiles function. An attacker can read arbitrary files on the server filesystem. Details A Directory Traversal attack also known ...

Directory Traversal

Overview net.sf.robocode:robocode.core is a Build the best - destroy the rest! Affected versions of this package are vulnerable to Directory Traversal via the recursivelyDelete function. An attacker can delete arbitrary files on the system by submitting specially crafted inputs that manipulate fi...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the Attachment service when processing uploaded file names. A user can overwrite files on the server by submitting specially crafted file paths. Details A Directory Traversal attack also known as path traversal ai...

Directory Traversal

Overview composio-core is a Core package to act as a bridge between composio platform and other services. Affected versions of this package are vulnerable to Directory Traversal via the downloadfileordir function. An attacker can access sensitive files outside the intended directory by supplying...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper path validation during an archive creation. An authenticated attacker can read files and directories outside the intended directory scope by supplying crafted paths during the archiving operation. Detail...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to missing canonicalization of destination file paths during model downloads. The createNewFile function in pkg/agent/storage/https.go previously used the fileFullName argument directly without cleaning, allowing...

Directory Traversal

Overview @fastify/reply-from is a forward your HTTP request to another server, for fastify Affected versions of this package are vulnerable to Directory Traversal via the reply.from function. An attacker can access unauthorized routes by crafting a malicious URL containing encoded directory...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the RemoveChunk function and the FileMd5 parameter. An attacker can remove arbitrary files and folders from the server by supplying crafted input. Details A Directory Traversal attack also known as path traversal...

Directory Traversal

Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Directory Traversal. Due to insufficient input sanitization in the backup tool, user-supplied paths are not properly restricted, allowing acce...

Directory Traversal

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Directory Traversal via the keras.utils.getfile function when extracting tar archives. An attacker can write arbitrary files outside the intended extraction directory by...

📄 7-Zip 25.00 Zip Slip Directory Traversal

7-Zip version 25.00 suffers from a symlink directory traversal vulnerability. This write up provides analysis with a proof of concept. ============================================================================================================================================= | Title : 7-Zip 25.0...

Directory Traversal

Overview cn.dreampie:resty-httpclient is a Resty java httpClient Affected versions of this package are vulnerable to Directory Traversal via the Request function. An attacker can access or modify files outside the intended directory by supplying crafted input to the filename argument. Details A...

Directory Traversal

Overview astro is an Astro is a modern site builder with web best practices, performance, and DX front-of-mind. Affected versions of this package are vulnerable to Directory Traversal via a mismatch in path normalization between routing and middleware validation. An attacker can access protected...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the SysFileApi function. An attacker can access arbitrary files on the server by supplying crafted input to the fileName parameter. Details A Directory Traversal attack also known as path traversal aims to access...

Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution

The NLTK downloader component contains a critical vulnerability where the unzipiter function uses zipfile.extractall without path validation or security checks. This allows malicious zip packages to achieve arbitrary code execution when extracted and loaded by NLTK. The vulnerability exists becau...

SUSE CVE-2025-62156

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 contain a Zip Slip path traversal vulnerability in artifact extraction. During artifact extraction the unpack/untar logic...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper symlink handling during the mounting process. An attacker can access and read arbitrary files from the virt-launcher pod's file system by creating a symbolic link within a PVC that points to sensitive...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via improper symlink handling during the mounting process. An attacker can access and read arbitrary files from the virt-launcher pod's file system by creating a symbolic link within a PVC that points to sensitive...