AIKIDO-2025-10431
github.com/cilium/cilium-cli is vulnerable to Zip Slip
75
High Risk
This Affects:
github.com/cilium/cilium-cliTL;DR
Affected versions of this package are vulnerable to a directory traversal (zip slip) vulnerability in the extractZip function due to insufficient sanitization of file paths within ZIP archives. Malicious archive entries containing ../ or absolute paths may cause files to be extracted outside the intended destination directory, potentially overwriting arbitrary files on the file system.
Who does this affect?
You are affected if you are use a vulnerable version of github.com/cilium/cilium-cli.
Background info
github.com/cilium/cilium-cli is vulnerable to Zip Slip in versions 0.18.0 - 0.18.4.
How to fix this
Upgrade github.com/cilium/cilium-cli to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant