Go/github.com/entireio/cli: medium
Entire CLI: Path traversal in checkpoint session metadata allows arbitrary file write during resume/rewind
Action: Upgrade github.com/entireio/cli to 0.7.7 or later.
go get github.com/entireio/cli@v0.7.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.7 | - |
Fixed versions
| 0.7.7 |
Sources
- osv: GHSA-2h46-9x5w-4wf7
- https://github.com/entireio/cli/security/advisories/GHSA-2h46-9x5w-4wf7
- https://github.com/entireio/cli/pull/1365
- https://github.com/entireio/cli/pull/1449
- https://github.com/entireio/cli
published · modified · JSON