VYPR

Maven package

com.cosium.vet/vet

pkg:maven/com.cosium.vet/vet

Vulnerabilities (1)

  • CVE-2021-29425Apr 13, 2021
    affected >= 1.0, <= 3.22

    In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limit