{"action":"Upgrade SharpCompress to 0.29 or later.","affected":[{"fixed":"0.29","introduced":"0"}],"component":"SharpCompress","cve_ids":["CVE-2021-39208"],"ecosystem":"NuGet","epss":0.01192,"exploited":false,"fixed_versions":["0.29"],"ghsa_id":"GHSA-jp7f-grcv-6mjf","id":"tcs_01M5N8STB7TA6MWF4QMFFP3HH7","modified_at":"2026-07-08T06:29:22.057779020Z","published_at":"2021-09-20T19:53:42Z","references":["https://osv.dev/vulnerability/GHSA-jp7f-grcv-6mjf","https://github.com/adamhathcock/sharpcompress/security/advisories/GHSA-jp7f-grcv-6mjf","https://nvd.nist.gov/vuln/detail/CVE-2021-39208","https://github.com/adamhathcock/sharpcompress/pull/614","https://github.com/adamhathcock/sharpcompress/commit/ea5c8dc06314c7a5068e7901c51a625224d2b288","https://github.com/adamhathcock/sharpcompress","https://github.com/adamhathcock/sharpcompress/releases/tag/0.29.0"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-jp7f-grcv-6mjf","url":"https://osv.dev/vulnerability/GHSA-jp7f-grcv-6mjf"}],"summary":"Partial path traversal in sharpcompress"}