Hashicorp Go-slug vulnerabilities

• hashicorp go-slug Unicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions CVE-2026-14978 5.5 MediumAugust 19, 2026
• hashicorp go-slug, shared library +1 more HashiCorp go-slug Vulnerable to Zip Slip Attack CVE-2025-0377 Fix available 7.5 HighJanuary 21, 2025
• hashicorp go-slug Unsafe tar unpacking in HashiCorp go-slug CVE-2020-29529 Fix available 7.5 HighDecember 3, 2020