VYPR

librepo

by librepo

Source repositories

CVEs (1)

  • CVE-2020-14352HigAug 30, 2020
    risk 0.52cvss 8.0epss 0.03

    A flaw was found in librepo in versions before 1.12.1. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the…