Skip to content

Commit 53753e4

Browse files
tatianabTatiana Bradley
authored andcommitted
data/reports: add alias for GO-2021-0106.yaml
Aliases: CVE-2020-36566, GHSA-jpf8-h7h7-3ppm Updates #106 Fixes #1238 Change-Id: I0f3d1acdd99ddfd34b27b5f7bb56e92aba620c4f Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461437 Reviewed-by: Tatiana Bradley <tatiana@golang.org> TryBot-Result: Gopher Robot <gobot@golang.org> Reviewed-by: Damien Neil <dneil@google.com> Run-TryBot: Tatiana Bradley <tatiana@golang.org>
1 parent c963ad7 commit 53753e4

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

data/osv/GO-2021-0106.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
"published": "2021-07-28T18:08:05Z",
44
"modified": "0001-01-01T00:00:00Z",
55
"aliases": [
6-
"CVE-2020-36566"
6+
"CVE-2020-36566",
7+
"GHSA-jpf8-h7h7-3ppm"
78
],
89
"details": "Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.",
910
"affected": [

data/reports/GO-2021-0106.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ description: |
1111
paths can cause files to be written (or overwritten) outside of the
1212
target directory.
1313
published: 2021-07-28T18:08:05Z
14+
ghsas:
15+
- GHSA-jpf8-h7h7-3ppm
1416
references:
1517
- fix: https://github.com/whyrusleeping/tar-utils/commit/20a61371de5b51380bbdb0c7935b30b0625ac227
1618
- web: https://snyk.io/research/zip-slip-vulnerability

0 commit comments

Comments
 (0)