CVE-2021-38197

CRITICAL CVSS: 9.8 Published: 2021-08-08 Modified: 2026-06-17

Description

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.

Affected Platforms

Go-Unarr Project Go-Unarr

Weakness Type

CWE-22

References