The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.
{ "url": "https://pkg.go.dev/vuln/GO-2022-1159", "review_status": "REVIEWED" }
{ "imports": [ { "symbols": [ "Build", "nTar" ], "path": "github.com/containers/podman/v4/pkg/bindings/images" } ] }