GHSA-3r8f-gphx-9m2c

Path Traversal in mcstatic

Source: GitHub Advisory Database (reviewed) High CVE-2018-3730

Packages

Ecosystem	Package	Affected	Fixed in
npm	mcstatic	<= 0.0.20	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of `mcstatic` are vulnerable to path traversal. ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module at this time.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2018-3730 advisory
https://hackerone.com/reports/312907 web
https://github.com/advisories/GHSA-3r8f-gphx-9m2c advisory
https://www.npmjs.com/advisories/641 web