Directory Security Advisories Pricing

/

Security Advisories

CVE-2025-0377

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-0377

Severity

9.1

Critical

CVSS V3

Description

HashiCorp’s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry.

References

Affected packages

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

© 2025 Chainguard. All Rights Reserved.