snyk/zip-slip-vulnerability
View on GitHub ↗ ★ 858
Zip Slip Vulnerability (Arbitrary file write through archive extraction)
4 mentions on Hacker News by 3 people: 1 story, 3 comments · first 2018-06-05 · latest 2018-06-23
20082026
-
https://github.com/snyk/zip-slip-vulnerability https://news.ycombinator.com/item?id=17237295
comment by based2 · 2018-06-23 · in OWASP Dependency-Check before 3.2.0 directory traversal filenames -
▲ 2
CVE-2018-1002100 Kubernetes: the kubectl cp command insecurely handles tar datastory by based2 · 2018-06-23 · 0 comments
-
…number of projects fix this issue[1]. It seems they are being nothing but a good citizen here. [1] https://github.com/snyk/zip-slip-vulnerability
comment by oh_sigh · 2018-06-05 · in Zip Slip Vulnerability -
…either isn't vulnerable or hasn't been tested; only third-party NuGet-based libraries are. [1]: https://github.com/snyk/zip-slip-vulnerability
comment by nathanaldensr · 2018-06-05 · in Zip Slip Vulnerability