← Database

CVE-2025-0377

HIGH CVSS: 7.5 Published: 2025-01-21 Modified: 2026-06-17

Description

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.

Affected Platforms

Hashicorp Go-Slug

Weakness Type

CWE-59

References