Hashicorp: >> Go-Slug >> 0.12.2 Security Vulnerabilities
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-01-21