NetSight
medium6.5

CVE-2022-26068

This affects the package pistacheio/pistache before 0.0.3.20220425.

Impact

This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server.

Affected products

VendorProductAffected versions
Pistache ProjectPistache
before 0.0.3.20220425

Weakness classification

References