| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/nothub/mrpack-install | < 0.16.3 | 0.16.3 |
| mrpack-install | < 0.16.3 | 0.16.3 |
Importing a malicious .mrpack file can cause path traversal while downloading files.
This can lead to scripts or config files being placed or replaced at arbitrary locations, without the user noticing.
No patches yet.
Avoid importing .mrpack files from untrusted sources.
https://docs.modrinth.com/docs/modpacks/format_definition/#files
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free