Go/github.com/u-root/u-root CVE-2020-7669: high 7.5, EPSS 1.83%
github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip)
Action: Upgrade github.com/u-root/u-root to 0.9.0 or later.
go get github.com/u-root/u-root@v0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: GHSA-75qf-wgfj-v652
- https://nvd.nist.gov/vuln/detail/CVE-2020-7669
- https://github.com/u-root/u-root/issues/2449
- https://github.com/u-root/u-root/pull/1817
- https://github.com/u-root/u-root/pull/2344
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUROOTUROOTPKGTARUTIL-570428
CVE-2020-7669 · published · modified · JSON