Goomph vulnerabilities

1 known vulnerability in Goomph from Diffplug. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  com.diffplug.gradle:goomph: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-26049Sep 11, 2022Com.diffplug.gradle:goomphEPSS 2.53%

  This affects the package com.diffplug.gradle:goomph before 3.37.2. It allows a malicious zip file to potentially break out of the expected destination directory, writing contents into arbitrary locations on the file system. Overwriting certain files/directorie