koa-static-security (>=0.0.3, <=0.0.7) potentially affected by CVE-2018-3732 via resolve-path (1.3.3)

resolve-path NPM version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on resolve-path and may be impacted: - koa-static-security =0.0.3, =0.0.7 Source cves: CVE-2018-3732 Source advisory: GHSA-62G9-6HW5-RWFP...

Path Traversal in resolve-path

Versions of resolve-path before 1.4.0 are vulnerable to path traversal. resolve-path relative path resolving suffers from a lack of file path sanitization for windows based paths. Recommendation Update to version 1.4.0 or later...

GHSA-62G9-6HW5-RWFP Path Traversal in resolve-path

Versions of resolve-path before 1.4.0 are vulnerable to path traversal. resolve-path relative path resolving suffers from a lack of file path sanitization for windows based paths. Recommendation Update to version 1.4.0 or later...

resolve-path path traversal vulnerability

resolve-path is a module for resolving and validating relative paths to the root path. A path traversal vulnerability exists in resolve-path versions prior to 1.4.0, which stems from the program's lack of detection of paths with special strings. An attacker can exploit this vulnerability to read...

CVE-2018-3732

resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path...

CVE-2018-3732

resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path...

CVE-2018-3732

The CVE-2018-3732 issue affects the resolve-path Node.js module prior to version 1.4.0. It suffers from a path traversal vulnerability due to insufficient validation of certain special-character paths, enabling a malicious user to read contents of files at known paths. Public reports across NVD, ...

koa-static-security (>=0.0.3, <=0.0.7) potentially affected by CVE-2018-3732 via resolve-path (1.3.3)

resolve-path NPM version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on resolve-path and may be impacted: - koa-static-security =0.0.3, =0.0.7 Source cves: CVE-2018-3732 Source advisory: MEND:CVE-2018-3732...

PT-2018-16156 · Node · Resolve-Path

Name of the Vulnerable Software and Affected Versions: resolve-path versions prior to 1.4.0 Description: The issue arises from a lack of validation of paths containing certain special characters in the resolve-path node module, allowing a malicious user to read the content of any file with a know...

CVE-2018-3732: Improper Limitation of a Pathname to a Restricted Directory

resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path...

Path Traversal

Overview Versions of resolve-path before 1.4.0 are vulnerable to path traversal. resolve-path relative path resolving suffers from a lack of file path sanitization for windows based paths. Recommendation Update to version 1.4.0 or later. References - HackerOne Report - GitHub Advisory...

Path Traversal

resolve-path is vulnerable path traversal attacks. A malicious user can access areas outside of the intended target directory by using a url containing ../...

Node.js third-party modules: Path Traversal on Resolve-Path

The author of resolve-path told me that I can submit this to here. The vulnerability already reported to the author and got a fixed! Module module name: resolve-path version: 1.3.3 npm page: https://www.npmjs.com/package/resolve-path Description Resolve a relative path against a root path with...