EUVD-2023-1005

Malicious code in bioql PyPI...

GO-2023-1611 Path traversal in github.com/gookit/goutil

fsutil.Unzip is vulnerable to path traversal attacks due to improper validation of paths...

CVE-2023-27475

Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...

Path traversal

Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...

CVE-2023-27475

This CVE concerns github.com/gookit/goutil, specifically the Unzip logic in fsutil.Unzip that can be exploited for path traversal (Zip Slip). The issue affects versions prior to 0.6.0 and is fixed by upgrading to 0.6.0 or later. The vulnerability arises from insufficient validation of relative fi...

CVE-2023-27475 Goutil vulnerable to path traversal when unzipping files

Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. This vulnerability is known as a ZipSlip. This issue has been fixed in version...