1.
CRAN 4.0.2 path traversal (CVE-2020-27637): malicious R packages abuse tar.gz headers to write outside install directories — overwriting binaries, adding cronjobs, planting SSH keys; fixed in 4.0.3.
Skip to content
Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-27637.