CVE-2022-0401

CVE-2022-0401 affects the npm package w-zip : a path traversal flaw during archive extraction exists in versions prior to 1.0.12. Root cause: improper handling of extraction paths enables directory traversal. Impact: as described in the entry, path traversal could lead to unauthorized file access...