An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
{ "urgency": "not yet assigned" }