CVE-2021-38197

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.

Date published : 2021-08-08

https://github.com/gen2brain/go-unarr/issues/21