dive tar-slip in image file extraction

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-27 04:14 UTC
Importiert: 2026-09-29 06:35 UTC
Quelle-ID: full_disc
uid_hash: 5cc15be1faf4344cb66a17345b372ba00f044a0ff55279e6be3b8a267ba127e5

Full Disclosure

Posted by Khashayar Fereidani on Sep 26

Author: Khashayar Fereidani

Disclosure Date: 2026-09-24

Advisory: https://fereidani.com/dive-tar-slip-in-image-file-extraction

Contact: https://fereidani.com/contact

dive is a terminal UI for exploring Docker image layers, and inspecting images

pulled from public registries is its main use case. The filetree view has an

extract action (the default keybinding is ctrl+e,...

No data

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
Full Disclosure	full_disc	threat_intel		-	de	https://seclists.org/rss/fulldisclosure.rss