Threats tagged 'ghsa-rrh3-cwwj-g5mg'

Cornac versions prior to 2.6.0 contain a critical path traversal vulnerability in the _extract_archive() function of download.py. This flaw allows attackers to craft TAR archives with malicious paths (e.g., ../ sequences, absolute paths, symlinks) that cause files to be extracted outside the intended cache directory. The vulnerability can be triggered via built-in dataset loaders that automatically download and extract archives, potentially leading to arbitrary file writes on the filesystem accessible to the running process. This issue is fixed in Cornac version 2.6.0.