CVE-2020-36193

HighKEV

Advisory

Published 20 Apr 2021In the index since 8 Sept 2026

Directory Traversal in Archive_Tar

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
pear/archive_tarcomposer	1.4.7	1.4.13	1
php-peardeb	1:1.10.6+submodules+notgz-1.1	1:1.10.6+submodules+notgz-1.1+deb10u2	1

2 by stars

Chart

Latest

Affected images

Radar Score

mailtrapdev-goodies

1 of the 1 container images this version deploys carry CVE-2020-36193.

Container image	Digest	Package	Fixed in
eaudeweb/mailtrap :2.3	b8ad9b7e19bb	php-pear@1:1.10.6+submodules+notgz-1.1	1:1.10.6+submodules+notgz-1.1+deb10u2

2,508

1 of the 2 container images this version deploys carry CVE-2020-36193.

Container image	Digest	Package	Fixed in
library/nextcloud :17.0.0-apache	96104cb965fc	pear/archive_tar@1.4.7	1.4.13

3,016

2 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
eaudeweb/mailtrap :2.3	b8ad9b7e19bb	php-pear@1:1.10.6+submodules+notgz-1.1	1:1.10.6+submodules+notgz-1.1+deb10u2	1
library/nextcloud :17.0.0-apache	96104cb965fc	pear/archive_tar@1.4.7	1.4.13	1