Duplicate Advisory: Downloader.download follows hardlinks and overwrites outside-root files
Moderate severity
GitHub Reviewed
Published
Aug 27, 2026
to the GitHub Advisory Database
•
Updated Sep 2, 2026
Withdrawn
This advisory was withdrawn on Sep 2, 2026
Give feedback on Dependabot alerts