—
GO-2021-0106
Path traversal in github.com/whyrusleeping/tar-utils
Quick fix
GO-2021-0106 — github.com/whyrusleeping/tar-utils: upgrade to the fixed version with the command below.
go get github.com/whyrusleeping/tar-utils@v0.0.0-20201201191210-20a61371de5bDetails
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/whyrusleeping/tar-utils
Introduced in:
0Fixed in: 0.0.0-20201201191210-20a61371de5bFix
go get github.com/whyrusleeping/tar-utils@v0.0.0-20201201191210-20a61371de5b