{"action":"Upgrade github.com/yi-ge/unzip to 1.0.3-0.20200308084313-2adbaa4891b9 or later.","affected":[{"fixed":"1.0.3-0.20200308084313-2adbaa4891b9","introduced":"0"}],"component":"github.com/yi-ge/unzip","cve_ids":["CVE-2020-36561"],"ecosystem":"Go","epss":0.01414,"exploited":false,"fixed_versions":["1.0.3-0.20200308084313-2adbaa4891b9"],"ghsa_id":"GHSA-f5c5-hmw9-v8hx","id":"tcs_01M5KF8CX47KJ8S6WPGN46R3CK","modified_at":"2023-11-08T04:03:47.481614Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-f5c5-hmw9-v8hx","https://nvd.nist.gov/vuln/detail/CVE-2020-36561","https://github.com/yi-ge/unzip/pull/1","https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73","https://github.com/yi-ge/unzip","https://pkg.go.dev/vuln/GO-2020-0035","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-f5c5-hmw9-v8hx","url":"https://osv.dev/vulnerability/GHSA-f5c5-hmw9-v8hx"}],"summary":"Unzip vulnerable to path traversal"}