Threats tagged 'ghsa-j95m-rcjp-q69h'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.0	EPSS 0.4%	CVE-2025-64346github.com/jaredallard/archives Has Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Medium6.0EPSS 0.4%2025-03-28GCVE DatabaseCVE-2025-64346 The github.com/jaredallard/archives library before version 1.0.1 contains a path traversal vulnerability that allows a malicious user to craft archives leading to remote code execution or file modification within the context of the running user. The impact severity depends on the permissions of the user running the library and the environment, with higher risk when run as root or in production systems. The vulnerability is fixed in version 1.0.1. EPSS 0.4%Report on CVE-2025-64346 Vulnerability CWE-22 #ghsa-j95m-rcjp-q69h #go	GCVE Database	2025-03-28

Page 1 of 1