GHSA-96vh-4rfp-c42c
HTSJDK is vulnerable to exposure of resource(s) to the wrong sphere
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.github.samtools:htsjdk | < 3.0.1 | 3.0.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
The package com.github.samtools:htsjdk before 3.0.1 are vulnerable to Creation of Temporary File in Directory with Insecure Permissions due to the createTempDir() function in util/IOUtil.java not checking for the existence of the temporary directory before attempting to create it.
References
External links from the advisory. They lead to third-party sites.