Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-31529
9.3
CRITICALCVSS v3
Published
July 11, 2022
CVSS v2
6.4 MEDIUM
Affected
6 projects
Assigned by
MITRE
Severity scale
010
Description
The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
tunnckoCore/monorepo
GitHubMono-repo including scoped and non-scoped packages, independently versioned. Managed by @Lerna and @YarnPKG. Using Jest, @ESLint, @Prettier and TypeScript through @Babel 7. Mange dependencies with @RenovateApp. Semantically versioned and automatically released on @CircleCI, following @Conventional-Commits!
GitHubMono-repo including scoped and non-scoped packages, independently versioned. Managed by @Lerna and @YarnPKG. Using Jest, @ESLint, @Prettier and TypeScript through @Babel 7. Mange dependencies with @RenovateApp. Semantically versioned and automatically released on @CircleCI, following @Conventional-Commits!<= 2021-03-03NVD