github.com/aquaproj/aqua
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Aqua's archive extraction follows attacker-planted symlinks, allowing writes outside the install directory | github.com/aquaproj/aqua/v2github.com/aquaproj/aqua | Go | Medium | Fix reported |