{"action":"Upgrade github.com/whyrusleeping/tar-utils to 0.0.0-20201201191210-20a61371de5b or later.","affected":[{"introduced":"0"}],"component":"github.com/whyrusleeping/tar-utils","cve_ids":["CVE-2020-36566"],"ecosystem":"Go","epss":0.0107,"exploited":false,"fixed_versions":["0.0.0-20201201191210-20a61371de5b"],"ghsa_id":"GHSA-jpf8-h7h7-3ppm","id":"tcs_01M5KFTHJX1E41AJBP53F58FT8","modified_at":"2024-05-20T16:03:47Z","published_at":"2021-07-28T18:08:05Z","references":["https://osv.dev/vulnerability/GO-2021-0106","https://github.com/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227","https://snyk.io/research/zip-slip-vulnerability"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2021-0106","url":"https://osv.dev/vulnerability/GO-2021-0106"}],"summary":"Path traversal in github.com/whyrusleeping/tar-utils"}