CVE-2026-55828
2 advisories.
Go/go.qbee.io/transport CVE-2026-55828: medium
go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)
Action: Upgrade go.qbee.io/transport to 1.26.25 or later.
go get go.qbee.io/transport@v1.26.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.26.25 | - |
Fixed versions
| 1.26.25 |
Sources
- osv: GHSA-f9m7-vc86-p6jj
- https://github.com/qbee-io/transport/security/advisories/GHSA-f9m7-vc86-p6jj
- https://github.com/qbee-io/transport
CVE-2026-55828 · published · modified · JSON
Go/go.qbee.io/transport CVE-2026-55828: unknown
go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)
Action: Upgrade go.qbee.io/transport to 1.26.25 or later.
go get go.qbee.io/transport@v1.26.25Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.26.25 | - |
Fixed versions
| 1.26.25 |
Sources
CVE-2026-55828 · published · modified · JSON