← Back

U Root

u-root

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
U Root
u-root
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7669
1U Root
1U Root
Jun 17, 2026
Sep 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
CVE-2020-7666
1U Root
1U Root
Jun 17, 2026
Sep 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio fi...Show more
This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.Show less
CVE-2020-7665
1U Root
1U Root
Jun 17, 2026
Sep 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects all versions of package github.com/u-root/u-root/pkg/uzip. It is vulnerable to both leading and non-leading relative path traversal attacks in zip file extraction.