← Back

Registry Support

registry-support

Vendor: Devfile • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-1485
2Devfile
Redhat
3Openshift
Openshift Developer Tools And ServicesRegistry Support
Jun 17, 2026
Feb 14, 2024
N/A· v4
9.3 CRITICAL· v3
N/A· v2
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. Thi...Show more
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite or delete files outside of the archive, which should not be allowed.Show less