| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/gen2brain/go-unarr | < 0.1.4 | 0.1.4 |
| go-unarr | = 0.1.1 |
unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free