—
GO-2026-5352
go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)
Quick fix
GO-2026-5352 — go.qbee.io/transport: upgrade to the fixed version with the command below.
go get go.qbee.io/transport@v1.26.25Details
go.qbee.io/transport: Symlink-chain path traversal in tar extraction (one level outside destination)
Are you affected?
Enter the version of the package you're using.