https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T14:36:00.736029+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-47877 CVE-2024-47877 — Extract has insufficient checks allowing attacker to create symlinks outside the extraction directory. 2026-10-09T14:36:00.752993+00:00

Affected: codeclysm extract

Extract is aA Go library to extract archives in zip, tar.gz or tar.bz2 formats. A maliciously crafted archive may allow an attacker to create a symlink outside the extraction target directory. This vulnerability is fixed in 4.0.0. If you're using the Extractor.FS interface, then upgrading to /v4 will require to implement the new methods that have been added.