1 matches found
GHSA-HPXR-W9W7-G4GV stereoscope vulnerable to tar path traversal when processing OCI tar archives
Impact It is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary directory. Specifically, use of github.com/anchore/stereoscope/pkg/file.UntarToDirectory function, the...
5.3CVSS7AI score0.00393EPSS
SaveExploits0References4
20