—
GO-2022-0346
Path traversal in github.com/quay/claircore
Quick fix
GO-2022-0346 — github.com/quay/claircore: upgrade to the fixed version with the command below.
go get github.com/quay/claircore@v1.1.0Details
A maliciously crafted RPM file can cause the Scanner.Scan function to write files with arbitrary contents to arbitrary locations on the local filestem.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/quay/claircore
Introduced in:
0Fixed in: 1.1.0Fix
go get github.com/quay/claircore@v1.1.0