CVE

CVE-2021-38197

CVE-2021-38197

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.

Source: CVE-2021-38197

Exit mobile version