{"action":"Upgrade minitar to 0.6 or later.","affected":[{"fixed":"0.6","introduced":"0"}],"component":"minitar","cve_ids":["CVE-2016-10173"],"ecosystem":"RubyGems","epss":0.04703,"exploited":false,"fixed_versions":["0.6"],"ghsa_id":"GHSA-h5g2-38x9-4gv3","id":"tcs_01M5KEKGY19VR68B0Q5FWSWERY","modified_at":"2024-02-16T08:04:25.597060Z","published_at":"2017-10-24T18:33:35Z","references":["https://osv.dev/vulnerability/GHSA-h5g2-38x9-4gv3","https://nvd.nist.gov/vuln/detail/CVE-2016-10173","https://github.com/halostatue/minitar/issues/16","https://github.com/halostatue/minitar/commit/e25205ecbb6277ae8a3df1e6a306d7ed4458b6e4","https://github.com/halostatue/minitar","https://security.gentoo.org/glsa/201702-32","https://web.archive.org/web/20170214020917/http://www.securityfocus.com/bid/95874","https://web.archive.org/web/20201207111726/https://www.puppet.com/security/cve/cve-2016-10173","http://www.debian.org/security/2017/dsa-3778","http://www.openwall.com/lists/oss-security/2017/01/24/7","http://www.openwall.com/lists/oss-security/2017/01/29/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h5g2-38x9-4gv3#RubyGems/minitar","url":"https://osv.dev/vulnerability/GHSA-h5g2-38x9-4gv3"}],"summary":"archive-tar-minitar and minitar vulnerable to Path Traversal"}