Security Advisory

CVE-2021-38197

9.8
CRITICAL

Vulnerability Description

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.
Published Date August 8, 2021
Official Source NIST NVD Advisory