lancet vulnerabilities

1 known vulnerability in lancet from Duke-git. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  lancet: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-41920Nov 17, 2022Duke-gitEPSS 1.04%

  Lancet is a general utility library for the go programming language. Affected versions are subject to a ZipSlip issue when using the fileutil package to unzip files. This issue has been addressed and a fix will be included in versions 2.1.10 and 1.3.4. Users a