Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-28949
7.8
HIGHCVSS v3
Published
November 19, 2020
CVSS v2
6.8 MEDIUM
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
drupal/drupal
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.>= 7.0, < 7.75, >= 8.8.0, < 8.8.12, >= 8.0.0, < 8.9.10, >= 9.0.0, < 9.0.9NVD
drupal
RubyGems
NPM
Crates.io
Docker Hub