CVE-2019-10743

CVE-2019-10743 affects the archiver package, where the unarchive function is vulnerable to path traversal (Zip Slip). A crafted zip with traversal filenames can cause extraction outside the target directory, potentially leading to arbitrary code execution if an executable or configuration file is...

CVE-2018-1002207

CVE-2018-1002207 affects the mholt/archiver Go package. The vulnerability stems from directory traversal in archive extraction ("../" path components), enabling an attacker to write to arbitrary files on the host. Affected: versions prior to the commit e4ef56d48eb029648b0e895bb0b6a393ef0829c3. Im...