CVE-2022-40082

CVE-2022-40082 affects Hertz (Go HTTP framework) v0.3.0 where the normalizePath function permits path traversal. The issue allows access to files outside the intended root and is described with a CVSS v3.1 base score of 7.5 (HIGH). A remediation exists: upgrade to v0.3.1, which is noted as patche...