NuGet/Zio: low 3.8
Zio has SubFileSystem Path Confinement Bypass via Unresolved `..` Segment
Action: Upgrade Zio to 0.22.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.22.2 | - |
Fixed versions
| 0.22.2 |
Sources
- osv: GHSA-h39g-6x3c-7fq9
- https://github.com/xoofx/zio/security/advisories/GHSA-h39g-6x3c-7fq9
- https://github.com/xoofx/zio/commit/c8c2f5328e50c1e7ab8c5c405fe70e0bd35f4782
- https://github.com/xoofx/zio
- https://github.com/xoofx/zio/releases/tag/0.22.2
published · modified · JSON