https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 03:25:02 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-25664 cnvd-2021-25664 https://cve.radiocsirt.org/vuln/cnvd-2021-25664 https://cve.radiocsirt.org/vuln/euvd-2026-181846 EUVD-2026-181846 https://cve.radiocsirt.org/vuln/euvd-2026-181846 https://cve.radiocsirt.org/vuln/fkie_cve-2020-7664 <p>In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> <p>In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-7664 https://cve.radiocsirt.org/vuln/ghsa-vpx7-vm66-qx8r <p><strong>Affected:</strong> Go: github.com/unknwon/cae</p> <p>The ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> <p>### Specific Go Packages Affected github.com/unknwon/cae/zip</p> <p><strong>Affected:</strong> Go: github.com/unknwon/cae</p> <p>The ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> <p>### Specific Go Packages Affected github.com/unknwon/cae/zip</p> https://cve.radiocsirt.org/vuln/ghsa-vpx7-vm66-qx8r https://cve.radiocsirt.org/vuln/gsd-2020-7664 gsd-2020-7664 https://cve.radiocsirt.org/vuln/gsd-2020-7664 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7664 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-unknwon-cae, Ubuntu:20.04:LTS: golang-github-unknwon-cae</p> <p>In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: golang-github-unknwon-cae, Ubuntu:20.04:LTS: golang-github-unknwon-cae</p> <p>In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn&#39;t securely escape file paths in zip archives which include leading or non-leading &#34;..&#34;. This allows an attacker to add or replace files system-wide.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-7664