Threats tagged 'ghsa-vhgw-c286-8gqg'

A vulnerability in wummel patool version 4.1.0 affects the extract_gzip function in the Gzip Extraction Handler component. The flaw allows symlink following due to improper handling, requiring local access to exploit. This can lead to limited integrity and availability impacts. The vulnerability has a medium severity score of 4.4 and no known exploits in the wild.