CVE-2023-25307 Information

Description

nothub mrpack-install <= v0.16.2 is vulnerable to Directory Traversal.

Reference

https://quiltmc.org/en/blog/2023-02-04-five-installer-vulnerabilities/ https://github.com/nothub/mrpack-install/security/advisories/GHSA-r887-gfxh-m9rr