{"action":"Upgrade code.cloudfoundry.org/archiver to 0.0.0-20180523222229-09b5706aa936 or later.","affected":[{"introduced":"0"}],"component":"code.cloudfoundry.org/archiver","cve_ids":["CVE-2018-25046"],"ecosystem":"Go","epss":0.01243,"exploited":false,"fixed_versions":["0.0.0-20180523222229-09b5706aa936"],"ghsa_id":"GHSA-32qh-8vg6-9g43","id":"tcs_01M5KFT4EXEVW511FK7XGZSNSY","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0025","https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0025","url":"https://osv.dev/vulnerability/GO-2020-0025"}],"summary":"Path traversal in code.cloudfoundry.org/archiver"}