Go/github.com/alist-org/alist/v3 CVE-2022-45969: critical 9.8, EPSS 1.23%
Alist vulnerable to Path Traversal
Action: Upgrade github.com/alist-org/alist/v3 to 3.6.0 or later.
go get github.com/alist-org/alist/v3@v3.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-pmg2-rph8-p8r6
- https://nvd.nist.gov/vuln/detail/CVE-2022-45969
- https://github.com/alist-org/alist/issues/2449
- https://github.com/alist-org/alist/commit/b5bf5f43253175b55fa2cb511fea601e677d2d83
- https://github.com/alist-org/alist
CVE-2022-45969 · published · modified · JSON