GHSA-23xp-j737-282v

Path Traversal in takeapeek

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-16473

Packages

Ecosystem	Package	Affected	Fixed in
npm	takeapeek	<= 0.2.2	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of `takeapeek` are vulnerable to path traversal exposing files and directories. ## Recommendation As no fix is currently available for this vulnerability is it is our recommendation to use another static file server.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-16473 advisory
https://hackerone.com/reports/403736 web
https://github.com/advisories/GHSA-23xp-j737-282v advisory
https://github.com/nodejs/security-wg/blob/master/vuln/npm/478.json web
https://www.npmjs.com/advisories/740 web