CVE-2020-36566

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2020
Source publication: Dec 27, 2022
Source updated: Apr 11, 2025
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Path traversal in github.com/whyrusleeping/tar-utils

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

github.com/whyrusleeping/tar-utils

Vendor: github.com/whyrusleeping/tar-utils
Product: github.com/whyrusleeping/tar-utils
Platforms: Unknown
Default status: unaffected
Package: github.com/whyrusleeping/tar-utils
Package collection: https://pkg.go.dev

github.com/whyrusleeping/tar-utils · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	0.0.0-20201201191210-20a61371de5b	Unavailable	None listed