Sharpcompress ProjectSharpcompress
1 matches found
CVE-2021-39208
CVE-2021-39208 applies to SharpCompress (a fully managed C# library for various compression formats). Versions prior to 0.29.0 are vulnerable to partial path traversal during extraction when ExtractionOptions.ExtractFullPath is true. The code validates that destinationFileName begins with fullDes...
4.3CVSS4.2AI score0.01192EPSS
Save