Go-unzip Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Go-unzip Project records in CISA KEV

No Go-unzip Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Go-unzip 1 record HIGH

Records

1 record

TI-2020-18788 CVE-2020-36560 · GHSA-rmj9-q58g-9qgg

Path traversal in github.com/artdarek/go-unzip

HIGH 72

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01333 Published 2022-12-27 Fixed in 1.0.0, 2.0.0 CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0