GO
Product
go-archive
by moby · last CVE Aug 18, 2026
1
CVEs
0
On KEV
7.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add go-archive to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-17106
7.1
0%
Aug 18
Tar extraction in moby/go-archive can write outside the destination directory via link following
Affected: before 0.3.0
Showing 1