id: GO-2022-0929
modules:
    - module: github.com/gen2brain/go-unarr
      versions:
        - fixed: 0.1.4
      vulnerable_at: 0.1.3
summary: Tarslip in go-unarr in github.com/gen2brain/go-unarr
cves:
    - CVE-2021-38197
ghsas:
    - GHSA-v9j4-cp63-qv62
references:
    - advisory: https://github.com/advisories/GHSA-v9j4-cp63-qv62
    - advisory: https://nvd.nist.gov/vuln/detail/CVE-2021-38197
    - fix: https://github.com/gen2brain/go-unarr/commit/239ec404d348280b50bbf671327709e8857fc5f4
    - report: https://github.com/gen2brain/go-unarr/issues/21
    - web: https://github.com/gen2brain/go-unarr/releases/tag/v0.1.4
source:
    id: GHSA-v9j4-cp63-qv62
    created: 2024-08-20T14:31:33.653863-04:00
review_status: UNREVIEWED
unexcluded: NOT_IMPORTABLE