CVE-2022-0401: Path Traversal in w-zip – CVSS 9.8 · Watchpost

← All vulnerabilities

Path Traversal in w-zip

심각 9.8CVE-2022-0401 · GHSA-fr6q-jv7j-35g3 · Published 01/02/2022 · updated 17/06/2026

요약

CVE-2022-0401은(는) w-zip (w-zip project), w-zip에 영향을 주는 심각 (CVSS 9.8) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 1.6%, 전체 취약점의 76.3%보다 높음.
조치: 1.0.12 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
w-zip w-zip_project	`< 1.0.12`	`1.0.12`
w-zip npm	`< 1.0.12`	`1.0.12`

Description

Path Traversal in NPM w-zip prior to 1.0.12.

NVD description

Path Traversal in NPM w-zip prior to 1.0.12.

References

nvd.nist.gov/vuln/detail/CVE-2022-0401 · ADVISORY
yuda-lyu/w-zip commit d7039d0 · WEB
yuda-lyu/w-zip · PACKAGE
huntr.dev/bounties/d93259aa-ad03-43d6-8846-a00b9f58876d · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free