CVE-2022-41920

Name of the Vulnerable Software and Affected Versions Lancet versions prior to 2.1.10 Lancet versions prior to 1.3.4

Description The issue is a ZipSlip problem that occurs when using the fileutil package to unzip files. This can be exploited when using the fileutil package. No information is provided about the estimated number of potentially affected devices or real-world incidents.

Recommendations For versions prior to 2.1.10, upgrade to version 2.1.10 or above. For versions prior to 1.3.4, upgrade to version 1.3.4 or above. As a temporary workaround, consider avoiding the use of the fileutil package to unzip files until a patch is applied.