github classgraph/classgraph classgraph-4.6.15

latest releases: classgraph-4.8.172, classgraph-4.8.171, classgraph-4.8.170...
5 years ago

Make handling of paths that contain .. or . more robust and secure:

  • Improves path normalization and duplicate matching if parent directory selectors (..) or current directory selectors (.) are present
  • Allows .. or . in within zipfile relative paths (after !)
  • Protects against a variant of the "zip slip" vulnerability -- only allows .. up to the root of the enclosing directory or zipfile hierarchy.

Don't miss a new classgraph release

NewReleases is sending notifications on new releases.