Количество 4
Количество 4
CVE-2025-0377
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
CVE-2025-0377
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
GHSA-wpfp-cm49-9m9q
HashiCorp go-slug Vulnerable to Zip Slip Attack
openSUSE-SU-2025:20097-1
Security update for helmfile
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-0377 HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | CVE-2025-0377 HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
| GHSA-wpfp-cm49-9m9q HashiCorp go-slug Vulnerable to Zip Slip Attack | CVSS3: 7.5 | 1% Низкий | больше 1 года назад |
 | openSUSE-SU-2025:20097-1 Security update for helmfile | 9 месяцев назад |
Уязвимостей на страницу