Red Hat Build of Keycloak/decompress
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| decompress allows arbitrary hardlink creation during archive extraction | decompressRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle | npmRed Hat | Medium | No fix reported | |
| decompress: Arbitrary File Write via Archive Extraction (Zip Slip) | decompressRed Hat Build of Keycloak/decompress | npmRed Hat | Medium | No fix reported | |
| decompress: decompress: path traversal via indexOf containment bypass allows arbitrary file write (bypass of CVE-2020-12265 fix) | Red Hat Build of Keycloak/decompress | Red Hat | Medium | No fix reported |