Path Traversal

proot-distro is vulnerable to Path Traversal. The vulnerability is due to improper validation of archive-controlled symbolic link targets member.linkname when extracting plain tarball root filesystems and Docker layers, which allows an attacker to craft a malicious archive containing absolute...