id: GO-2025-3808
modules:
    - module: github.com/ctfer-io/chall-manager
      versions:
        - fixed: 0.1.4
      vulnerable_at: 0.1.3
summary: |-
    Chall-Manager is vulnerable to Path Traversal when extracting/decoding a zip
    archive in github.com/ctfer-io/chall-manager
cves:
    - CVE-2025-53632
ghsas:
    - GHSA-3gv2-v3jx-r9fh
references:
    - advisory: https://github.com/ctfer-io/chall-manager/security/advisories/GHSA-3gv2-v3jx-r9fh
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2025-53632
    - fix: https://github.com/ctfer-io/chall-manager/commit/47d188fda5e3f86285e820f12ad9fb6f9930662c
    - web: https://github.com/ctfer-io/chall-manager/releases/tag/v0.1.4
source:
    id: GHSA-3gv2-v3jx-r9fh
    created: 2025-07-21T16:53:53.153059888Z
review_status: UNREVIEWED