CVE-2022-25937
1 advisory.
npm/glance CVE-2022-25937: medium 6.5
Path traversal vulnerability in glance
Action: Upgrade glance to 3.0.9 or later.
npm i glance@3.0.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.0.9 | - |
Fixed versions
| 3.0.9 |
Sources
- osv: GHSA-3hjh-5hgx-f5wh
- https://nvd.nist.gov/vuln/detail/CVE-2022-25937
- https://github.com/jarofghosts/glance/commit/8cecfe90286e0c45a5494067f1b592d0ccfeabac
- https://gist.github.com/lirantal/c8cfb0398c78e558b7d4ac02aae67809
- https://github.com/jarofghosts/glance
- https://security.snyk.io/vuln/SNYK-JS-GLANCE-3318395
CVE-2022-25937 · published · modified · JSON