{"id":"CVE-2022-29967","details":"static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal.","modified":"2026-04-11T23:14:59.516117Z","published":"2022-04-29T23:15:09.937Z","references":[{"type":"FIX","url":"https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/babelouest/glewlwyd","events":[{"introduced":"0"},{"last_affected":"d147ccd0c493b1fad5a2bcd2a9a5c6d3fda9ae1c"},{"fixed":"e3f7245c33897bf9b3a75acfcdb8b7b93974bf11"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"2.6.2"}]}}],"versions":["1.0","1.0.1","1.1","1.1.1","1.1.2","1.2","1.2.1","1.2.2","v1.2.3","v1.2.4","v1.3","v1.3.1","v1.3.2","v1.3.3","v1.4.0","v1.4.1","v1.4.2","v1.4.3","v1.4.4","v1.4.6","v1.4.7","v1.4.8","v1.4.9","v2.0.0","v2.0.0-b1","v2.0.0-b2","v2.0.0-b3","v2.0.0-rc1","v2.0.0-rc2","v2.1.0","v2.1.1","v2.2.0","v2.3.0","v2.3.1","v2.3.2","v2.4.0","v2.5.0","v2.5.1","v2.5.2","v2.5.3","v2.6.0","v2.6.1","v2.6.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-29967.json","vanir_signatures_modified":"2026-04-11T23:14:59Z","vanir_signatures":[{"signature_version":"v1","digest":{"threshold":0.9,"line_hashes":["214780142764602157075791188521117548087","149029358984154185979674218665657513770","72058649184213672970482867954840201866","66981640211413300866092233921874891886","29832082487672741049093194224220390621","232009279282130326299019360066273481484","56554857926059713428862901656731055390","139695126402316211103356470502324403513","65267218265186024510309569093215473633","124831265639094128251278489693807086675","192889864164178605908664408581913067972","299108428696561461445085606832638491892","207276040478407847464748444621316278868","265393684198403503471398169919224709362","24385936693453863575075466391101742587","186458839262880061801783248802356355404","113527797751753879886176247489029085016","301164689460801254561623660407045763164","72757770930020787955963749635559055762","3590084084360598554649094526563230653","85511803413387910945144231112460809646","156401311599824990821389581115204491055","152450276157774627161558990238907150370","10946830018238793165339270772336486576","55859029724835655263639832929645904281","126739936557389465923109303021601121130","276694602769978757264006304629895847193","311585357531396057733571191398753176519","119947218353863497131714706853025161982","287596117390990785689290615691774892313","110761080072279434173052433864227795645","79925875564066680242478227679484231261","239456286950448386860707601305020735094","236126355545510801111993673861759136720","49686739785360290604267167711292332736","279976027878669404995193632436048775090","258418933530436189695271523344915735060","87640896720326949099065576576814305861","12280726749810509865864438673889815592","205538864887905000108263298597353823254","182950962652342131369511446651982014528","197243126665488499340309695486461698923","114342961166426122369034383353530728657","324803614986164244741765776483542954763","227975337098095375092351971611452916531","260806828557305927014004341601683382964","155581168895046834714536041988449272977","51031319590456488259308579633448787580","49540746284807503666026286480077907589","73149551296466111681638284744212347842","93433096765740171210809639798422731942","129499281689149484319426971209709216641","29373806412154003148194720619834210745","103875605099950278806419684378857675931","329655040198092692645709134326620529754","13709035640513723948096377728918907109","295516071234684053181919395655846476405","148398294401366328334951823478080457116","211189096155039065861225384483110609450","287312741050747324709322415456389042460","171345022152836914311293620572088512495","108186535715188106632125963944653706604","198045328705856409978016044685037832203","84324805003761675843479172265142291174","144791737463015268716429132436804782523","306680787042723013399792477788782049018","238770070959779638323576438230699668839","174789005032252309859410592369226834088","234662500529079985201089578469793882773","202802711196591178964127418043349325907","52804849940263657711447665197778410268","6125563207965652221000226835300916278","195363554456061469625454256199213727247","299602499128796621765158447704257426979","175551792983273096134233136725148487481","43018868947157506201204291489125327241","301567293504556913121283762914152282401","102060692149362354789073203954567302208","184904706384749678687598088988627055367","40479609106011464972334963281877077415","85154572862913893002384514277342133649","314081695024803448042938468489494270343","265118091924062754696749629585095744819","307917030715718821984131635604008445420","203251358045412969711765991480864489413","6791388905583898864411209649771895976","191727588533482590629284834135681816772","281083740441717580546324279382160671758","313367282098121195068775807359261507091","186614874336832351414049252583998178731","264716874236454769627989847129852953277","225046684417221814520077236788843057413","309001321923751363977760125849422995908","165083473807205185539646353932824868906","14033348509941434174627980665312579773","231778239198073896198893172423234802811","132528284395405719402738903945117025185","162774742583089875786820169600810592296","275823784954763318267120273778716661490","301217635039031045342842444357938496862","307067128187215323440182842085574857574","152930147446255795649020724087349362947","258663313812228590100320348109566176071","274790101134579279949631054979331702559","235112822764624724529159480525539610523","23106687780131342292889968570451597891","326977730404141999685565178965529246849","6530203484715977282640533523677431230","9456184133715325234323286939507254748","130130517754690757466317956329252724188","10766205541393901799316270292723277757","271027280967016528964814830439914375272","12048800492243011476113803118678605907","269822066644102261716370778037423748815","130019983920649507269846232822606495297","88707464484781280279045148807181312950","12597995810719237151401612323713639671","96686981466461566357285023075486333809","224651891102250767689244234254350418405","161446068124165179479282644299686231870","22023748744442103276502725765157002641","4659419396644425690404249542194440521","158991985055392144609998596423213679383","210481503619024550721878137411227122385","259335331624516512281785257912565078755","41943739702980366192077260136947902583","148033222255684598494488748167676047504","58414888566188053682504908356291675951","293276616417580748612450861074462440485","98786392675243540019680583562854755973","196048546963294131869155355558367210015","218809276432043550528243264862783079749","51635132105213618667610278060877303883","161762516119274820514926643145388727039","303702968709859134328261281699351535312","16819251130630960692945098029369915516","141056002820140550054325146297645480547","265174639547660115355281442152329407226","162835814168090970812284310326758193272","157798470668623833525784553543076047960","161092359272457386825649103313338737980","126739936557389465923109303021601121130","276694602769978757264006304629895847193","311585357531396057733571191398753176519","119947218353863497131714706853025161982","287596117390990785689290615691774892313","50382668705414206881202984948497961925","81608023415292128739531803585526953297","94005220642847236433365560514814185563","28845503447756595813109569103230429492","280601165677074549895156609936450799255","93930672603229829480458532397436454985","74505745654365210555323634497089242136","182499759276261144401390974535173491741","41958321523758052590884932043858351321","133832822017388833809426329416620343146","15443806263544329890962625943423641978","135470315157946470669907383363956295377","43603987045720605569497046783291821609","218740912444591490841982875158055742247","77942558144261790089101845833343223007"]},"signature_type":"Line","id":"CVE-2022-29967-6b736b0d","deprecated":false,"source":"https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11","target":{"file":"src/static_compressed_inmemory_website_callback.c"}},{"signature_version":"v1","digest":{"function_hash":"37656510222410812897668841561580776423","length":1958},"signature_type":"Function","id":"CVE-2022-29967-74757dbc","deprecated":false,"source":"https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11","target":{"file":"src/static_compressed_inmemory_website_callback.c","function":"callback_static_file_uncompressed"}},{"signature_version":"v1","digest":{"function_hash":"294129840294921224774034859401889179732","length":6067},"signature_type":"Function","id":"CVE-2022-29967-a5d9ae38","deprecated":false,"source":"https://github.com/babelouest/glewlwyd/commit/e3f7245c33897bf9b3a75acfcdb8b7b93974bf11","target":{"file":"src/static_compressed_inmemory_website_callback.c","function":"callback_static_compressed_inmemory_website"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}]}