VDB
ANCHORE-2025-0377
ANCHORE-2025-0377
PUBLISHED
HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| HashiCorp | go-slug | 0, 0, 0 |
Timeline
- Jan 21, 2025 CVE Published