Search for packages
purl | pkg:composer/pear/archive_tar@1.4.13 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-dfmf-642c-aaaf
Aliases: CVE-2021-32610 GHSA-p8q8-jfcv-g2h2 |
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. |
Affected by 0 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-unxt-vez2-aaad | Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. |
CVE-2020-36193
GHSA-rpw6-9xfx-jvcx |