CVE-2021-39208

CVE-2021-39208 describes a partial path traversal vulnerability in SharpCompress versions prior to 0.29.0, a C# library for compression. This flaw allows an attacker to create files outside the intended destination directory, potentially one level up, by exploiting a lack of proper path termination enforcement. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with low complexity, requiring low privileges, and resulting in low integrity impact (CWE-22). There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.