Skip to content

Conversation

@PotatoCloud
Copy link
Contributor

No description provided.

@PotatoCloud PotatoCloud added bug Something isn't working enhancement New feature or request labels Nov 26, 2023
@PotatoCloud PotatoCloud self-assigned this Nov 26, 2023
@PotatoCloud PotatoCloud merged commit 58b5822 into master Nov 26, 2023
tarReader := tar.NewReader(gzipReader)

for {
header, err := tarReader.Next()

Check failure

Code scanning / CodeQL

Arbitrary file access during archive extraction ("Zip Slip")

Unsanitized archive entry, which may contain '..', is used in a [file system operation](1). Unsanitized archive entry, which may contain '..', is used in a [file system operation](2).
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

bug Something isn't working enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants