CVE-2022-1812

Integer Overflow or Wraparound in publify/publify

Integer Overflow or Wraparound in GitHub repository publify/publify prior to 9.2.10.

Affected

publify · publify/publify

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 HUNTR

7.6 HIGHCVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS

30.78% chance of exploitation in the next 30 days, 98th percentile

Published

2023-01-14

Updated

2025-04-07

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/17d86a50-265c-4ec8-9592-0bd909ddc8f3

Security advisories

• publify/publify/commit/29a5837c29620e33857d7a5afce01384e3f8e41a
• advisories/GHSA-rc42-jghf-vr8f

References

• CVE Record
• NVD entry