~ / search / GHSA-3hvm-hgpw-rx4j

GHSA-3hvm-hgpw-rx4j

Path Traversal in knightjs

Source: GitHub Advisory Database (reviewed) High CVE-2018-16475

Packages

EcosystemPackageAffectedFixed in
npm knightjs <= 0.0.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of `knightjs` are vulnerable to Path Traversal. This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation. ## Recommendation As there is currently no fix for this module we recommend not using this module in production environments.

References

External links from the advisory. They lead to third-party sites.