EUVD-2022-0991

Malicious code in bioql PyPI...

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

GHSA-FR6Q-JV7J-35G3 Path Traversal in w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

Path Traversal in w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401

Path Traversal in NPM w-zip prior to 1.0.12...

Path traversal

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401 Path Traversal in yuda-lyu/w-zip

Path Traversal in NPM w-zip prior to 1.0.12...

CVE-2022-0401

CVE-2022-0401 affects the npm package w-zip : a path traversal flaw during archive extraction exists in versions prior to 1.0.12. Root cause: improper handling of extraction paths enables directory traversal. Impact: as described in the entry, path traversal could lead to unauthorized file access...

W-Zip 路径遍历漏洞

W-Zip is a Zip and 7Z compression utility. A path traversal vulnerability exists in w-zip that stems from path traversal in NPM w-zip before 1.0.12...

Path Traversal in yuda-lyu/w-zip

Description w-zip is vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. Proof of Concept // PoC.js var wz = require'w-zip'; let fpUnzip = './testData/outputZip' let fpUnzipExtract = fpUnzip + '/extract' let fpZip1 = fpUnzip + '/zipslip.zip' async function checkzipslip //unzip...