Adrian Martinez Garcia <[email protected]> writes: > I found a path traversal vulnerability in GNU cpio (HEAD, 2.15.90) that > bypasses --no-absolute-filenames, and I am reporting it here for > coordinated disclosure before any public discussion. > > [...] > > I am happy to coordinate on timing/embargo. Please let me know how you > would like to proceed.
This is a public mailing list. Unfortunetly, it seems Claude hasn't figured out how mailing lists have worked in the past year... Collin
