Avwo vulnerabilities
We track 1 vulnerability in Avwo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.7average CVSS score
Latest Avwo vulnerabilities
- 8.7 High severity
whistle: Improper Limitation of a Pathname to a Restricted Directory
Whistle is an HTTP, HTTP2, HTTPS, and WebSocket debugging proxy. Prior to 2.10.3, lib/service/service.js handles GET /cgi-bin/temp/get by reading req.query.filename, joining it to TEMP_FILES_PATH only when it matches the temporary file pattern, and otherwise p