CVE-2020-7681

This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js...

CVE-2020-7681 Directory Traversal

This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js...

CVE-2020-7681

CVE-2020-7681: Directory traversal in marscode due to lack of path sanitization in the file path used by fs.readFile in index.js. Affected: all versions of marscode. The vulnerability allows accessing files outside the intended directory; several sources (GHSA, CNVD, NVD, OSV, PRION, Snyk) confir...