Add rustsec advisory for GHSA-5xg3-j2j6-rcx4 (#1023)

* Add rustsec advisory for GHSA-5xg3-j2j6-rcx4

* Update RUSTSEC-0000-0000.md

Add [affected] section
This commit is contained in:
Jon Moroney
2021-09-09 15:38:41 -07:00
committed by GitHub
parent 71f18afd3b
commit fa5597ee92

View File

@@ -0,0 +1,18 @@
```toml
[advisory]
id = "RUSTSEC-0000-0000"
package = "git-delta"
date = "2021-07-12"
url = "https://nvd.nist.gov/vuln/detail/CVE-2021-36376"
categories = ["file-disclosure"]
cvss = "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
aliases = ["CVE-2021-36376"]
[affected]
os = ["windows"]
[versions]
patched = [">= 0.8.3"]
```
# Relative Path Traversal in git-delta
git-delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory.