tocsin

CVE-2026-50567

2 advisories.

Go/github.com/fission/fission CVE-2026-50567: high 7.7, EPSS 0.45%

Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory

Action: Upgrade github.com/fission/fission to 1.25.0 or later.

go get github.com/fission/fission@v1.25.0

Affected

introducedfixedlast affected
01.25.0-

Fixed versions

1.25.0

Sources

CVE-2026-50567 · published · modified · JSON

Go/github.com/fission/fission CVE-2026-50567: unknown, EPSS 0.45%

Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory in github.com/fission/fission

Action: Upgrade github.com/fission/fission to 1.25.0 or later.

go get github.com/fission/fission@v1.25.0

Affected

introducedfixedlast affected
01.25.0-

Fixed versions

1.25.0

Sources

CVE-2026-50567 · published · modified · JSON