CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@huntr.dev

Published

2022-02-01

Last modified

2024-08-02

Weaknesses

CWE-22

Affected products

• W-zip (W-zip Project)
• Yuda-lyuw-zip (Yuda-lyu)

References

• https://github.com/yuda-lyu/w-zip/commit/d7039d034e02fa358e6656565157cedf5fa83288
• https://huntr.dev/bounties/d93259aa-ad03-43d6-8846-a00b9f58876d