Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2020-36566

Path traversal in github.com/whyrusleeping/tar-utils

Description

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

github.com/whyrusleeping/tar-utils github.com/whyrusleeping/tar-utils

Default version status: unaffected

  • 0 to < 0.0.0-20201201191210-20a61371de5baffected

References