Description
Alist v3.4.0 is vulnerable to Directory Traversal,
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/alist-org/alist | all versions | — | GO-2022-1171 |
| Go | github.com/alist-org/alist/v3 | < 3.6.0 | 3.6.0 | GHSA-pmg2-rph8-p8r6 |
Critical · 9.8
CVE-2022-45969
EUVD-2022-7704GHSA-pmg2-rph8-p8r6GO-2022-1171
Alist vulnerable to Path Traversal
Published Dec 15, 2022 · Updated Apr 21, 2025 · Assigned by mitre