id: GO-2022-0787
modules:
    - module: github.com/datacharmer/dbdeployer
      versions:
        - fixed: 1.58.2
      vulnerable_at: 1.58.1
summary: |-
    Symbolic links in an unpacking routine may enable attackers to read and/or write
    to arbitrary locations in dbdeployer in github.com/datacharmer/dbdeployer
cves:
    - CVE-2020-26277
ghsas:
    - GHSA-47wr-426j-fr82
references:
    - advisory: https://github.com/datacharmer/dbdeployer/security/advisories/GHSA-47wr-426j-fr82
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2020-26277
    - fix: https://github.com/datacharmer/dbdeployer/commit/548e256c1de2f99746e861454e7714ec6bc9bb10
source:
    id: GHSA-47wr-426j-fr82
    created: 2024-08-20T14:14:48.994064-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE