GO-2026-6259
- Source
- https://pkg.go.dev/vuln/GO-2026-6259
- Import Source
- https://vuln.go.dev/ID/GO-2026-6259.json
- JSON Data
- https://api.osv.dev/v1/vulns/GO-2026-6259
- Aliases
- Downstream
CGA (30)
- CGA-34p4-xg24-3332
- CGA-43jm-8qwp-w6c4
- CGA-5g8x-vmmh-g8cq
- CGA-5vm9-vrxq-p5gp
- CGA-6fmm-v8ff-r5hw
- CGA-6pfq-6x5j-52p7
- CGA-6q48-hmxv-q2rp
- CGA-7jp3-vjpq-wxxp
- CGA-8264-782m-vp6r
- CGA-9255-qwm6-j466
- CGA-9mmc-895c-fvjg
- CGA-f3qg-rqcx-hm35
- CGA-fc4g-r9pq-54gc
- CGA-gv9h-3r69-prqp
- CGA-jp8g-fw74-mg95
- CGA-m58v-wqwm-f25h
- CGA-ph7v-36j8-8q7h
- CGA-pq6x-mh7c-48qp
- CGA-prfc-2mhm-p4pm
- CGA-q9rp-5xc9-6jmc
- CGA-qr9w-m3vm-wg6c
- CGA-r93r-m8c9-rhcm
- CGA-rm8r-gx23-qxrx
- CGA-v533-m4m8-qfhv
- CGA-v7jp-f9h9-7v55
- CGA-vpmx-c8vc-m579
- CGA-vvpg-43m2-wj48
- CGA-w4r8-cphv-g5f9
- CGA-w6pr-3hvx-hxrg
- CGA-x7xp-rpvh-h4fw
- Published
- 2026-08-25T19:43:10Z
- Modified
- 2026-08-26T01:20:20Z
- Summary
- Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero
- Details
-
Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero
- Database specific
{ "review_status": "UNREVIEWED", "url": "https://pkg.go.dev/vuln/GO-2026-6259" }- References
Affected packages
Go / github.com/vmware-tanzu/velero
Package
- Name
- github.com/vmware-tanzu/velero
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/vmware-tanzu/velero