Description
Path Traversal in NPM w-zip prior to 1.0.12.
Remediation
References
https://github.com/yuda-lyu/w-zip/commit/d7039d034e02fa358e6656565157cedf5fa83288
https://huntr.dev/bounties/d93259aa-ad03-43d6-8846-a00b9f58876d
Related Vulnerabilities
CVE-2023-37259 Vulnerability in npm package matrix-react-sdk
CVE-2021-3189 Vulnerability in npm package slashify
CVE-2024-36401 Vulnerability in maven package org.geoserver:gs-wfs
CVE-2022-41940 Vulnerability in maven package org.webjars.npm:engine.io
CVE-2021-21293 Vulnerability in maven package org.http4s:blaze-core_2.11