AZL-60936

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/AZL-60936

Upstream

Published

2025-04-23T16:15:48Z

Modified

2026-09-09T14:17:17Z

Summary

CVE-2025-46394 affecting package busybox 1.36.1-27

Details

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

1.36.1-27

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60936.json"