CVE-2020-7666
1 advisory.
Go/github.com/u-root/u-root/pkg/cpio CVE-2020-7666: high 7.5, EPSS 1.53%
github.com/u-root/u-root/pkg/cpio Arbitrary File Write via Archive Extraction (Zip Slip)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 7.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mq35-x99r-54fc
- https://nvd.nist.gov/vuln/detail/CVE-2020-7666
- https://github.com/u-root/u-root/pull/1817
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMUROOTUROOTPKGCPIO-570440
CVE-2020-7666 · published · modified · JSON