PyPI/proot-distro: medium 6.6
PRoot-Distro has Path Traversal in proot-distro copy — Arbitrary Read, Write, and Persistent Code Execution Outside Container Rootfs
Action: Upgrade proot-distro to 5.1.0 or later.
pip install proot-distro==5.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.1.0 | - |
Fixed versions
| 5.1.0 |
Sources
- osv: GHSA-mfr4-mq8w-vmg6
- https://github.com/termux/proot-distro/security/advisories/GHSA-mfr4-mq8w-vmg6
- https://github.com/termux/proot-distro
- https://github.com/termux/proot-distro/releases/tag/v5.1.0
published · modified · JSON