PT-2021-18100 · Open Container Initiative +1 · Umoci +1

Name of the Vulnerable Software and Affected Versions: Open Container Initiative umoci versions prior to 0.4.7 Description: The issue allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when "umoci unpack" or "umoci raw unpack" is used. This is due...

PT-2018-16144 · Npm · Assign-Deep

Name of the Vulnerable Software and Affected Versions: assign-deep versions prior to 0.4.7 Description: The issue allows a malicious user to modify the prototype of Object via proto , causing the addition or modification of an existing property that will exist on all objects. This is achieved...