GO-2022-0921
- Source
- https://pkg.go.dev/vuln/GO-2022-0921
- Import Source
- https://vuln.go.dev/ID/GO-2022-0921.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GO-2022-0921
- Aliases
- Published
- 2024-08-21T15:29:08Z
- Modified
- 2024-09-11T06:13:35.871166Z
- Summary
- Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
- Details
-
Archive package allows chmod of file outside of unpack target directory in github.com/containerd/containerd
- Database specific
{ "url": "https://pkg.go.dev/vuln/GO-2022-0921", "review_status": "UNREVIEWED" }- References
-
- https://github.com/containerd/containerd/security/advisories/GHSA-c72p-9xmj-rx3w
- https://nvd.nist.gov/vuln/detail/CVE-2021-32760
- https://github.com/containerd/containerd/commit/22e9a70c71eff6507be71955947a611f2ed91e6c
- https://github.com/containerd/containerd/commit/7ad08c69e09ee4930a48dbf2aab3cd612458617f
- https://github.com/containerd/containerd/releases/tag/v1.4.8
- https://github.com/containerd/containerd/releases/tag/v1.5.4
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DDMNDPJJTP3J5GOEDB66F6MGXUTRG3Y3
- https://security.gentoo.org/glsa/202401-31
Affected packages
Go / github.com/containerd/containerd
Package
- Name
- github.com/containerd/containerd
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/containerd/containerd