https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:31:49.346730+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-1485 CVE-2024-1485 — Registry-support: decompress can delete files outside scope via relative paths 2026-10-06T10:31:49.363236+00:00

Affected: registry-support, Red Hat OpenShift Developer Tools and Services, Red Hat OpenShift Container Platform 4

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.