GO-2025-3767: OSV-SCALIBR's Container Image Unpacking Vulnerable to Arbitrary File Write via Path Traversal in github.com/google/osv-scalibr

javalockfile

package

v0.1.6 Latest Latest Go to latest Published: Feb 5, 2025 License: Apache-2.0 Imports: 0 Imported by: 0

Details

Package javalockfile provides shared structures for Java extractors.

This section is empty.

This section is empty.

This section is empty.

type Metadata struct {
	ArtifactID   string
	GroupID      string
	Type         string
	Classifier   string
	DepGroupVals []string
}

Metadata holds parsing information for a Java package.

func (m Metadata) DepGroups() []string

DepGroups returns the dependency groups for the package.