Go/github.com/deislabs/oras CVE-2021-21272: unknown, EPSS 1.47%

Zip slip directory exploit in github.com/deislabs/oras

Action: Upgrade github.com/deislabs/oras to 0.9.0 or later.

go get github.com/deislabs/oras@v0.9.0

Affected

Fixed versions

Sources

• osv: GO-2021-0099
• https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e

CVE-2021-21272 · published 2021-04-14T20:04:52Z · modified 2024-05-20T16:03:47Z · JSON