CVE-2021-38197: Tarslip in go-unarr

Severity: Critical

CVSS Score: 9.8

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.