CVE-2022-0401
1 advisory.
npm/w-zip CVE-2022-0401: critical 9.8
Path Traversal in w-zip
Action: Upgrade w-zip to 1.0.12 or later.
npm i w-zip@1.0.12Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.12 | - |
Fixed versions
| 1.0.12 |
Sources
- osv: GHSA-fr6q-jv7j-35g3
- https://nvd.nist.gov/vuln/detail/CVE-2022-0401
- https://github.com/yuda-lyu/w-zip/commit/d7039d034e02fa358e6656565157cedf5fa83288
- https://github.com/yuda-lyu/w-zip
- https://huntr.dev/bounties/d93259aa-ad03-43d6-8846-a00b9f58876d
CVE-2022-0401 · published · modified · JSON