CVE-2018-1002208
1 advisory.
NuGet/SharpZipLib CVE-2018-1002208: medium 5.5
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Action: Upgrade SharpZipLib to 1.0.0-rc1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-rc1 | - |
Fixed versions
| 1.0.0-rc1 |
Sources
- osv: GHSA-cqj4-m2pc-v9m5
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002208
- https://github.com/icsharpcode/SharpZipLib/issues/232
- https://github.com/icsharpcode/SharpZipLib/wiki/Release-1.0
- https://github.com/snyk/zip-slip-vulnerability
- https://snyk.io/research/zip-slip-vulnerability
- https://snyk.io/vuln/SNYK-DOTNET-SHARPZIPLIB-60247
CVE-2018-1002208 · published · modified · JSON