Vulnerability in sam-3d-objects project
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
Start with the linked CVE report and inspect the repository's dependency manifests for gdown 5.2.1. Locate any archive-extraction entry points that use the affected dependency and determine the required remediation; done means the vulnerable version or usage is addressed and extraction cannot write outside its intended directory.
Written by the indexing model from the issue text.
Description
The Path Traversal vulnerability in gdown version 5.2.1 highlights the risks of extracting untrusted archives without proper filename validation. By allowing malicious ZIP or TAR files to write outside the intended directory, this flaw can lead to arbitrary file overwrite and, in some cases, even remote code execution.
- Dominant language
- Python
- Stars
- 7.6k
- Forks
- 897
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from facebookresearch/sam-3d-objects
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
-
V60Open
Difficulty 5/5 Over a week Newbie friendliness 15/100
-
Difficulty 1/5 Under an hour Newbie friendliness 15/100
facebookresearch/sam-3d-objects#202 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 25/100
All issues in facebookresearch/sam-3d-objects
Similar issues
-
cost:cheap practicality:seen-in-the-wild severity:medium
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
fairagro/m4.2_advanced_middleware_api#620 ·
Maintainers usually reply within 1 day
-
area:security effort:S priority:P2 provider:local-libvirt status:ready type:docs
Difficulty 2/5 1-3 hours Newbie friendliness 75/100
randomparity/kdive#3495 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 82/100
microsoft/markitdown#2820 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
Maintainers usually reply within 2 days