{"action":"Upgrade github.com/yi-ge/unzip to 1.0.3-0.20200308084313-2adbaa4891b9 or later.","affected":[{"fixed":"1.0.3-0.20200308084313-2adbaa4891b9","introduced":"0"}],"component":"github.com/yi-ge/unzip","cve_ids":["CVE-2020-36561"],"ecosystem":"Go","epss":0.01414,"exploited":false,"fixed_versions":["1.0.3-0.20200308084313-2adbaa4891b9"],"ghsa_id":"GHSA-f5c5-hmw9-v8hx","id":"tcs_01M5KFT63YDHEBX5YX49GENKPV","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-04-14T20:04:52Z","references":["https://osv.dev/vulnerability/GO-2020-0035","https://github.com/yi-ge/unzip/pull/1","https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2020-0035","url":"https://osv.dev/vulnerability/GO-2020-0035"}],"summary":"Path traversal in github.com/yi-ge/unzip"}