HIGH7.5Go
GHSA-2g5j-5x95-r6hr· CVE-2020-29529, GO-2021-0094Unsafe tar unpacking in HashiCorp go-slug
Modified: 11/8/2023
package
Go/github.com/hashicorp/go-slug
pkg:go/github.com/hashicorp/go-slug
HIGH7.5Go
GHSA-wpfp-cm49-9m9q· CVE-2025-0377, GO-2025-3413HashiCorp go-slug Vulnerable to Zip Slip Attack
Modified: 9/10/2026
—Go
GO-2021-0094· CVE-2020-29529, GHSA-2g5j-5x95-r6hrDirectory traversal in github.com/hashicorp/go-slug
Modified: 5/20/2024
—Go
GO-2025-3413· CVE-2025-0377, GHSA-wpfp-cm49-9m9qHashiCorp go-slug Vulnerable to Zip Slip Attack in github.com/hashicorp/go-slug
Modified: 2/4/2026