| Package | Affected versions | Patched versions |
|---|---|---|
| drupal/core | ≥ 8.0.0, < 8.9.17≥ 9.1.0, < 9.1.11≥ 9.2.0, < 9.2.2 | 8.9.179.1.119.2.2 |
| pear/archive_tar | < 1.4.14 | 1.4.14 |
| archive tar | < 1.4.14 | 1.4.14 |
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free