Repository navigation

Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
3.x	✅
2.x	✅
1.x	❌

Reporting a Vulnerability

Open an issue describing reproduction instructions. Public issues are fine.

--extract-dir flag enables arbitrary file writes via path traversal attack (../)
GHSA-rjq9-6g6p-98qr published Oct 13, 2026 by tstromberg

High

Learn more about advisories related to atomdrift-project/cleave in the GitHub Advisory Database