File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. NATS nats-server before 2.7.4 allows Directory Traversal (with write access) via an element in a ZIP archive for JetStream streams. nats-streaming-server before 0.24.3 is also aff…CVE-2022-26652Linuxfoundation · 2.3% likely

   CWE-22

2. Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the mo…CVE-2022-25882Linuxfoundation · CVSS 7.5 · 1.7% likely

   CWE-22

3. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network confi…CVE-2021-20206Linuxfoundation · 1.5% likely

   CWE-22

4. An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traver…CVE-2021-36157Linuxfoundation · 1.4% likely

   CWE-22

5. NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action from a management account.CVE-2022-28357Linuxfoundation · 1.2% likely

   CWE-22

6. AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow. The…CVE-2026-37531Linuxfoundation · CVSS 9.8 · 0.7% likely

   CWE-22

7. Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.locati…CVE-2025-51480Linuxfoundation · CVSS 8.8 · 0.7% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.