crates.io/skillctl: high
skillctl: Path traversal and symlink-follow in skillctl allow arbitrary file disclosure and deletion
Action: Upgrade skillctl to 0.1.2 or later.
cargo update -p skillctl --precise 0.1.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.2 | - |
Fixed versions
| 0.1.2 |
Sources
- osv: GHSA-wx3m-whqv-xv47
- https://github.com/umanio-agency/skillctl/security/advisories/GHSA-wx3m-whqv-xv47
- https://github.com/umanio-agency/skillctl/commit/827fff5c0698dd9e48e777d5907cf7bc19b91aca
- https://github.com/umanio-agency/skillctl
- https://github.com/umanio-agency/skillctl/releases/tag/v0.1.2
published · modified · JSON