Количество 5
Количество 5
CVE-2025-0377
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
CVE-2025-0377
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
GHSA-wpfp-cm49-9m9q
HashiCorp go-slug Vulnerable to Zip Slip Attack
openSUSE-SU-2025:20097-1
Security update for helmfile
SUSE-SU-2025:0297-1
Security update for govulncheck-vulndb
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-0377 HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад | |
CVE-2025-0377 HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад | |
GHSA-wpfp-cm49-9m9q HashiCorp go-slug Vulnerable to Zip Slip Attack | CVSS3: 7.5 | 0% Низкий | 11 месяцев назад | |
openSUSE-SU-2025:20097-1 Security update for helmfile | около 1 месяца назад | |||
SUSE-SU-2025:0297-1 Security update for govulncheck-vulndb | 11 месяцев назад |
Уязвимостей на страницу