CVE-2026-22685 | DevToys prior 2.0.9.0 NUPKG Archives path traversal (GHSA-ggxr-h6fm-p2qh)

January 10, 2026 Yanac

A vulnerability marked as critical has been reported in DevToys. This issue affects some unknown processing of the component NUPKG Archives. The manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-22685. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More