Go/github.com/cloudfoundry/archiver CVE-2018-25046: critical 9.1, EPSS 1.29%
Cloud Foundry Archiver vulnerable to path traversal
Action: Upgrade github.com/cloudfoundry/archiver to 0.0.0-20180523222229-09b5706aa936 or later.
go get github.com/cloudfoundry/archiver@v0.0.0-20180523222229-09b5706aa936Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20180523222229-09b5706aa936 |
Sources
- osv: GHSA-32qh-8vg6-9g43
- https://nvd.nist.gov/vuln/detail/CVE-2018-25046
- https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840
- https://github.com/cloudfoundry/archiver
- https://pkg.go.dev/vuln/GO-2020-0025
- https://snyk.io/research/zip-slip-vulnerability
CVE-2018-25046 · published · modified · JSON