CVE-2020-26279

The CVE-2020-26279 issue affects go-ipfs (Go implementation of IPFS): path traversal can occur when retrieving DAGs that contain relative paths, potentially overwriting files or writing to unintended output directories. The vulnerability manifests only during ipfs get operations on affected DAGs ...

CVE-2020-26279 Path traversal

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0-rc1, it is possible for path traversal to occur with DAGs containing relative paths during retrieval. This can cause files to be overwritten, or written t...