Vulnerability record: CVE-2022-26049 in diffplug/goomph (version 3.37.1)
Weakness: CWE-022 \u2014 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
GitHub Security Advisory: GHSA-p2f7-9cv7-jjf6
Repository: https://github.com/diffplug/goomph
Buggy commit: fe2083196f0d0a75885aea402baaa972254173d5
Fix commit(s): 25f04f67ba62d9a14104bee13a0a0f2517afb8c8