Beveiligingsadvies

CVE-2025-9118

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-25 07:05:31
Laatst bijgewerkt 2025-08-25 13:48:40
Toegewezen door GoogleCloud
CVSS-score 10.0
Status PUBLISHED

Beschrijving

A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file.