`github.com/sassoftware/go-rpmutils`

Ecosystem:
go

Package URL:
pkg:golang/github.com/sassoftware/go-rpmutils

Total PRs:
14 Dependabot PRs

Latest PR:
about 1 year ago

Unique Repositories:
11 repositories

Unique Repos (30 days):
0 repositories

Security Advisories

github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)

GHSA-9423-6c93-gpp8 CVE-2020-7667 HIGH published almost 5 years ago • updated 26 days ago

The CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading `..` which leads in file extraction ...

Recent PRs

chore(deps): bump the go-modules group with 69 updates

idiap/python-packagers #1

0.2.0 → 0.4.0 Minor PR

Closed about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 79 updates

initializ-buildpacks/conda-env-update #37

0.2.0 → 0.4.0 Minor PR

Open about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 70 updates

paketo-buildpacks/cpython #893

0.2.0 → 0.4.0 Minor PR

Closed about 1 year ago 3 comments

Bump the go-modules group across 1 directory with 66 updates

paketo-buildpacks/poetry-install #436

0.2.0 → 0.4.0 Minor PR

Open about 1 year ago 1 comment

Bump the go-modules group across 1 directory with 61 updates

paketo-buildpacks/pipenv-install #499

0.2.0 → 0.4.0 Minor PR

Open over 1 year ago 2 comments

Bump the go-modules group across 1 directory with 59 updates

paketo-buildpacks/pipenv #682

0.2.0 → 0.4.0 Minor PR

Open over 1 year ago 1 comment

Bump the go-modules group across 1 directory with 59 updates

paketo-buildpacks/pip #725

0.2.0 → 0.4.0 Minor PR

Open over 1 year ago 2 comments

Bump the go-modules group across 1 directory with 56 updates

paketo-buildpacks/pip-install #480

0.2.0 → 0.4.0 Minor PR

Closed over 1 year ago 1 comment

Bump the go-modules group across 1 directory with 53 updates

paketo-buildpacks/poetry #468

0.2.0 → 0.4.0 Minor PR

Closed over 1 year ago

Bump the go-modules group across 1 directory with 56 updates

paketo-buildpacks/miniconda #626

0.2.0 → 0.4.0 Minor PR

Closed almost 2 years ago

Bump the go-modules group across 1 directory with 51 updates

paketo-buildpacks/conda-env-update #454

0.2.0 → 0.4.0 Minor PR

Closed almost 2 years ago 3 comments

Package Details

Name:	`github.com/sassoftware/go-rpmutils`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/sassoftware/go-rpmutils`
JSON API:	View JSON

Security Advisories

1

Active advisories

HIGH 1

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/sassoftware/go-rpmutils
Homepage:	https://github.com/sassoftware/go-rpmutils
Latest Release:	`v0.4.0` about 2 years ago
Dependent Repos:	3,289
Dependent Packages:	251
Ranking:	Top 0.1425% by dependent repos Top 0.2793% by dependent pkgs

PR Status

Open 5 (35.7%)

Merged 0 (0.0%)

Closed 6 (42.9%)

PR Types

Minor 11 (78.6%)