Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/sharpcompress@0.29.0
purl pkg:nuget/sharpcompress@0.29.0
Next non-vulnerable version 0.48.0
Latest non-vulnerable version 0.48.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-yh5j-pyzt-kyf1
Aliases:
CVE-2026-44788
GHSA-6c8g-7p36-r338
SharpCompress is a fully managed C# library to deal with many compression types and formats. In 0.47.4 and earlier, a path traversal vulnerability in IArchive.WriteToDirectory() allows a malicious archive to create directories outside the intended extraction root. For TAR archives, this can be escalated to arbitrary file writes by chaining with a symlink entry, giving a full write primitive on the target filesystem subject to the permissions of the running process.
0.48.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-m5ga-r2ms-97f3 CVE-2021-39208
GHSA-jp7f-grcv-6mjf

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T06:24:32.017518+00:00 GHSA Importer Fixing VCID-m5ga-r2ms-97f3 https://github.com/advisories/GHSA-jp7f-grcv-6mjf 38.6.0
2026-06-12T22:24:06.886274+00:00 GitLab Importer Affected by VCID-yh5j-pyzt-kyf1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/sharpcompress/CVE-2026-44788.yml 38.6.0
2026-06-12T15:42:24.590320+00:00 GitLab Importer Fixing VCID-m5ga-r2ms-97f3 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/sharpcompress/CVE-2021-39208.yml 38.6.0