GHSA-fxh6-w476-hgr4
Directory Traversal in SharpCompress
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| NuGet | SharpCompress | < 0.21.0 | 0.21.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
SharpCompress prior to version 0.21 is vulnerable to path traversal issue in archive extraction.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002206
- https://github.com/adamhathcock/sharpcompress/pull/374
- https://github.com/adamhathcock/sharpcompress/commit/42b1205fb435de523e6ef8ac5b7bafbe712997f6
- https://github.com/adamhathcock/sharpcompress/commit/80ceb1c375fdb1b4ffba16528c99089e804ce61f
- https://github.com/snyk/zip-slip-vulnerability
- https://snyk.io/research/zip-slip-vulnerability
- https://snyk.io/vuln/SNYK-DOTNET-SHARPCOMPRESS-60246