CVE-2022-1032: Craterapp Crater

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

Insecure deserialization of not validated module file in GitHub repository crater-invoice/crater prior to 6.0.6.

Affected products

• Craterapp Crater: before 6.0.6 (fixed in 6.0.6)

Published 2022-03-29. Last modified 2026-06-17.