Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9567-xfjr-xvwf

Опубликовано: 27 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

EPSS

Процентиль: 30%
0.00374
Низкий

8.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

CVSS3: 8.8
nvd
11 дней назад

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

EPSS

Процентиль: 30%
0.00374
Низкий

8.8 High

CVSS3

Дефекты

CWE-22