Approved changes feed: RSS · Atom

cpe:2.3:a:tar-utils_project:tar-utils:*:*:*:*:*:go:*:*

part: a version: * update: *

VendorTar Utils Project (423d69f7-5d57-57dc-843f-2812141df7a0)
ProductTar Utils (f0cf27fb-2cbb-5b44-ba2f-d6a108377e37)
Edition*
Language*
Software edition*
Target softwarego
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/whyrusleeping/tar-utils purl2cpe 2026-06-01 10:13:15.032702

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36566 vulnerable 2026-06-08 05:25:49.150227 Path traversal in github.com/whyrusleeping/tar-utils
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Published: 2022-12-27T21:13:44.009Z
Updated: 2025-04-11T16:22:21.352Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.