Posted by Khashayar Fereidani on Sep 26# dive tar-slip in image file extraction Author: Khashayar Fereidani Disclosure Date: 2026-09-24 Advisory: https://fereidani.com/dive-tar-slip-in-image-file-extraction Contact: https://fereidani.com/contact ## Description dive is a terminal UI for exploring Docker image layers, and inspecting images pulled from public registries is its main use case. The filetree view has an extract action (the default keybinding is ctrl+e,...