CVE-2022-42725

Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.

CVE-2023-29380

Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.