2 matches found
GO-2023-2048 Paths outside of the rootfs could be produced on Windows in github.com/cyphar/filepath-securejoin
Certain rootfs and path combinations result in generated paths that are outside of the provided rootfs on Windows...
GHSA-6XV5-86Q9-7XR8 SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced
Impact For Windows users of github.com/cyphar/filepath-securejoin, until v0.2.4 it was possible for certain rootfs and path combinations in particular, where a malicious Unix-style /-separated unsafe path was used with a Windows-style rootfs path to result in generated paths that were outside of...