Known Vulnerabilities for Go-archive by Moby
Listed below are 10 of the newest known vulnerabilities associated with "Go-archive" by "Moby".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103754 json | A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the wo... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102514 json | Out-of-bounds Write (CWE-787) in the PEA archive extraction routine (pea.pas, unpea_procedure) of the first-party pea compone... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-102332 json | Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log downl... | Not Provided | 2026-09-28 | 2026-10-01 |
| CVE-2026-102252 json | A path traversal vulnerability (CWE-22) in the embedded VMDK filesystem extractor in Google OSV-SCALIBR versions 0.3.6 throug... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-101894 json | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API r... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-101066 json | A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/ap... | Not Provided | 2026-09-28 | 2026-09-28 |
| CVE-2026-100542 json | OpenClaw (npm package 'openclaw') versions >= 2026.5.28 and < 2026.8.1 mishandle archive listings in the tar.bz2 skill instal... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-95806 json | MISP ships with PHP's phar stream wrapper registered in both its web entry point and its console entry point. The phar str... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-93995 json | Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5. Apache MINA SSHD ... | Not Provided | 2026-09-30 | 2026-09-30 |
| CVE-2026-93992 json | Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbi... | Not Provided | 2026-09-19 | 2026-09-21 |