CVE-2021-21272
2 advisories.
Go/github.com/deislabs/oras CVE-2021-21272: high 7.7, EPSS 1.47%
Zip slip directory exploit in github.com/deislabs/oras
Action: Upgrade github.com/deislabs/oras to 0.9.0 or later.
go get github.com/deislabs/oras@v0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
- osv: GHSA-g5v4-5x39-vwhx
- https://github.com/deislabs/oras/security/advisories/GHSA-g5v4-5x39-vwhx
- https://nvd.nist.gov/vuln/detail/CVE-2021-21272
- https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e
- https://github.com/deislabs/oras
- https://github.com/deislabs/oras/releases/tag/v0.9.0
- https://pkg.go.dev/github.com/deislabs/oras/pkg/oras
- https://pkg.go.dev/vuln/GO-2021-0099
CVE-2021-21272 · published · modified · JSON
Go/github.com/deislabs/oras CVE-2021-21272: unknown, EPSS 1.47%
Zip slip directory exploit in github.com/deislabs/oras
Action: Upgrade github.com/deislabs/oras to 0.9.0 or later.
go get github.com/deislabs/oras@v0.9.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.0 | - |
Fixed versions
| 0.9.0 |
Sources
CVE-2021-21272 · published · modified · JSON