{"action":"Upgrade github.com/mholt/archiver to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"3.0.0"}],"component":"github.com/mholt/archiver","cve_ids":["CVE-2019-10743"],"ecosystem":"Go","epss":0.06352,"exploited":false,"fixed_versions":["3.3.2"],"ghsa_id":"GHSA-h74j-692g-48mq","id":"tcs_01M5KFC37CAJ9MSYPG61V7NX1R","modified_at":"2025-01-14T07:56:51.026896Z","published_at":"2021-05-18T15:31:53Z","references":["https://osv.dev/vulnerability/GHSA-h74j-692g-48mq","https://nvd.nist.gov/vuln/detail/CVE-2019-10743","https://github.com/mholt/archiver/pull/169","https://github.com/mholt/archiver/pull/203","https://github.com/mholt/archiver/commit/8217ed3a206c0473b4ec1aff51375b398838073a","https://github.com/snyk/zip-slip-vulnerability","https://snyk.io/research/zip-slip-vulnerability","https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMMHOLTARCHIVERCMDARC-174728"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-h74j-692g-48mq","url":"https://osv.dev/vulnerability/GHSA-h74j-692g-48mq"}],"summary":"Path Traversal in MHolt Archiver"}