GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

javascript/

Details

Path	Synopsis
bunlock Package bunlock extracts bun.lock files	Package bunlock extracts bun.lock files
internal
commitextractor Package commitextractor provides a function to extract commit hash from the full git URL	Package commitextractor provides a function to extract commit hash from the full git URL
packagejson Package packagejson extracts package.json files.	Package packagejson extracts package.json files.
packagelockjson Package packagelockjson extracts package-lock.json files.	Package packagelockjson extracts package-lock.json files.
pnpmlock Package pnpmlock extracts pnpm-lock.yaml files.	Package pnpmlock extracts pnpm-lock.yaml files.
yarnlock Package yarnlock extracts NPC yarn.lock files.	Package yarnlock extracts NPC yarn.lock files.