~ / search / GHSA-8pww-pp5r-rff8

GHSA-8pww-pp5r-rff8

Path Traversal in marscode

Source: GitHub Advisory Database (reviewed) High CVE-2020-7681

Packages

EcosystemPackageAffectedFixed in
npm marscode <= 1.0.1-0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

This affects all versionsup to and including version 1.0.1-0 of package marscode. There is no path sanitization in the path provided at `fs.readFile` in `index.js`.

References

External links from the advisory. They lead to third-party sites.