Go/github.com/artdarek/go-unzip CVE-2020-36560: unknown, EPSS 1.29%

Path traversal in github.com/artdarek/go-unzip

Action: Upgrade github.com/artdarek/go-unzip to 1.0.0 or later.

go get github.com/artdarek/go-unzip@v1.0.0

Affected

Fixed versions

Sources

• osv: GO-2020-0034
• https://github.com/artdarek/go-unzip/pull/2
• https://github.com/artdarek/go-unzip/commit/4975cbe0a719dc50b12da8585f1f207c82f7dfe0
• https://snyk.io/research/zip-slip-vulnerability

CVE-2020-36560 · published 2021-04-14T20:04:52Z · modified 2024-05-20T16:03:47Z · JSON