Executive brief
Links in archives can overwrite any existing file
Affected products
- crates.io tar
Junglewise Threat Intelligence
CVE-2018-20990: RUSTSEC-2018-0002 - Links in archives can overwrite any existing file
CVE-2018-20990 · Severity: low · CVSS 3 · Published 2018-06-29
Technologies: tar (crates.io). Vendors: crates.io.