Debian Golang-Github-Hashicorp-Go-Slug vulnerabilities

1 known vulnerability affecting debian/golang-github-hashicorp-go-slug.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2020-29529HIGHCVSS 7.5fixed in golang-github-hashicorp-go-slug 0.5.0-1 (bookworm)2020

CVE-2020-29529 [HIGH] CVE-2020-29529: golang-github-hashicorp-go-slug - HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal ... HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of multiple symlinks. Fixed in 0.5.0. Scope: local bookworm: resolved (fixed in 0.5.0-1) bullseye: resolved (fixed in 0.5.0-1)