Path Traversal

Overview

All versions of knightjs are vulnerable to Path Traversal.

This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation.

Recommendation

As there is currently no fix for this module we recommend not using this module in production environments.

References

• HackerOne Report
• Node.js Security-wg
• GitHub Advisory