Th1Nkkk

Name of the Vulnerable Software and Affected Versions: go-unarr versions 0.1.1 Description: The issue allows Directory Traversal via ../ in a pathname within a TAR archive. This is possible due to a flaw in the unarr.go file in go-unarr. Recommendations: For go-unarr version 0.1.1, consider restricting the handling of TAR archives to prevent directory traversal attacks until a patch is available. As a temporary workaround, consider validating and sanitizing pathnames within TAR archives to prevent ../ sequences from being processed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.