{"action":"Upgrade github.com/whyrusleeping/tar-utils to 0.0.0-20201201191210-20a61371de5b or later.","affected":[{"introduced":"0"}],"component":"github.com/whyrusleeping/tar-utils","cve_ids":["CVE-2020-36566"],"ecosystem":"Go","epss":0.01111,"exploited":false,"fixed_versions":["0.0.0-20201201191210-20a61371de5b"],"ghsa_id":"GHSA-jpf8-h7h7-3ppm","id":"tcs_01M5KFEJ77XCE55W6X24M44QJR","modified_at":"2023-11-08T04:03:47.788921Z","published_at":"2022-12-28T00:30:23Z","references":["https://osv.dev/vulnerability/GHSA-jpf8-h7h7-3ppm","https://nvd.nist.gov/vuln/detail/CVE-2020-36566","https://github.com/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227","https://github.com/whyrusleeping/tar-utils","https://pkg.go.dev/vuln/GO-2021-0106","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-jpf8-h7h7-3ppm","url":"https://osv.dev/vulnerability/GHSA-jpf8-h7h7-3ppm"}],"summary":"tar-utils Path Traversal vulnerability"}