Vulnerability GO-2026-5735
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
4 months ago
June 25, 2026 at 10:34 PM UTC
DDEV has ZipSlip path traversal in tar and zip archive extraction in github.com/ddev/ddev
v0.9.1 - v1.25.1
v0.9.1 - v1.25.1
Summary
DDEV has ZipSlip path traversal in tar and zip archive extraction in github.com/ddev/ddev
Details
DDEV has ZipSlip path traversal in tar and zip archive extraction in github.com/ddev/ddev
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
6 hours ago
DDEV incomplete tar symlink traversal fix allows host file overwrite - Incomplete fix of CVE-2026-32885
v0.9.1 - v1.25.3 GHSA-9hq4-hm3j-jmph
v0.9.1 - v1.25.3 GHSA-9hq4-hm3j-jmph
Medium Risk
6 months ago
DDEV has ZipSlip path traversal in tar and zip archive extraction
v0.9.1 - v1.25.1 GHSA-x2xq-qhjf-5mvg
v0.9.1 - v1.25.1 GHSA-x2xq-qhjf-5mvg
Impacted packages
Timeline
Published
4 months ago
June 25, 2026 at 10:34 PM UTC
Last Modified
4 months ago
June 25, 2026 at 11:01 PM UTC