Description
Hertz v0.3.0 ws discovered to contain a path traversal vulnerability via the normalizePath function.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/cloudwego/hertz | < 0.3.1 | 0.3.1 | GHSA-c9qr-f6c8-rgxf |
High · 7.5
CVE-2022-40082
EUVD-2022-6778GHSA-c9qr-f6c8-rgxfGO-2022-1027
Hertz contains path traversal via normalizePath function
Published Sep 28, 2022 · Updated May 21, 2025 · Assigned by mitre