| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/hashicorp/go-slug | < 0.5.0 | 0.5.0 |
| go-slug | < 0.5.0 | 0.5.0 |
HashiCorp go-slug before 0.5.0 does not address attempts at directory traversal involving ../ and symlinks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free