debian/plexus-archiver vulnerabilities

Latest debian/plexus-archiver CVEs

Newest publication first

1. CVE-2018-1002200 Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver

   Published 2018-07-25

   Medium·CVSS 5.5 EPSS 11.6%

   plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

2. DSA-4227-1 plexus-archiver - security update

   Published 2018-06-12

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.