GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

os/

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/google/osv-scalibr

Links

Open Source Insights

Directories ¶

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL

Path	Synopsis
apk Package apk extracts packages from the APK database.	Package apk extracts packages from the APK database.
cos Package cos extracts OS packages from Container Optimized OSes (go/cos).	Package cos extracts OS packages from Container Optimized OSes (go/cos).
dpkg Package dpkg extracts packages from dpkg database.	Package dpkg extracts packages from dpkg database.
flatpak Package flatpak extracts packages from flatpak metainfo files.	Package flatpak extracts packages from flatpak metainfo files.
homebrew Package homebrew extracts package information from OSX homebrew INSTALL_RECEIPT.json files.	Package homebrew extracts package information from OSX homebrew INSTALL_RECEIPT.json files.
kernel
module Package module extracts .ko files from kernel modules.	Package module extracts .ko files from kernel modules.
vmlinuz Package vmlinuz extracts information about vmlinuz compressed kernel images.	Package vmlinuz extracts information about vmlinuz compressed kernel images.
macapps Package macapps extracts applications data from Info.plist files of OS X devices.	Package macapps extracts applications data from Info.plist files of OS X devices.
nix Package nix extracts packages from the Nix store directory.	Package nix extracts packages from the Nix store directory.
osrelease Package osrelease parses the os-release file.	Package osrelease parses the os-release file.
pacman Package pacman extracts packages from archlinux desc file.	Package pacman extracts packages from archlinux desc file.
portage Package portage extracts packages from portage database.	Package portage extracts packages from portage database.
rpm Package rpm extracts packages from rpm database.	Package rpm extracts packages from rpm database.
snap Package snap extracts snap packages	Package snap extracts snap packages