@formicarium/tanajura (>=0.0.2, <=1.10.3), starbucket (>=0.9.1, <=1.1.1) +2 more potentially affected by unknown CVE via node-git-server (>=0.0.1, <=0.4.3)

node-git-server NPM version =0.0.1, =0.0.2, =0.9.1, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: MEND:WS-2019-0313...

WS-2019-0313

There is an Unauthorized File Access vulnerability found in all versions of node-git-server. Attacker may access private repositories by using absolute paths...

@formicarium/tanajura (>=0.0.2, <=1.10.3), tanajura123 (0.0.2) +1 more potentially affected by unknown CVE via node-git-server (>=0.3.4, <=0.4.3)

node-git-server NPM version =0.3.4, =0.0.2, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: GHSA-CV3V-7846-6PXM...

@formicarium/tanajura (>=0.0.2, <=1.10.3), tanajura123 (0.0.2) +1 more potentially affected by unknown CVE via node-git-server (>=0.3.4, <=0.4.3)

node-git-server NPM version =0.3.4, =0.0.2, =0.1.0, =0.3.1 Source cves: unknown CVE Source advisory: OSV:GHSA-CV3V-7846-6PXM...

GHSA-CV3V-7846-6PXM Unauthorized File Access in node-git-server

Versions of node-git-server prior to 0.6.1 are vulnerable to Unauthorized File Access. It is possible to access any git repository by using absolute paths, which may allow attackers to access private repositories. Recommendation Upgrade to version 0.6.1 or later...

Unauthorized File Access in node-git-server

Versions of node-git-server prior to 0.6.1 are vulnerable to Unauthorized File Access. It is possible to access any git repository by using absolute paths, which may allow attackers to access private repositories. Recommendation Upgrade to version 0.6.1 or later...

PT-2020-21253

Name of the Vulnerable Software and Affected Versions node-git-server versions prior to 0.6.1 Description The issue allows unauthorized file access, enabling attackers to access any git repository using absolute paths, potentially exposing private repositories. Recommendations Upgrade to version...

Unauthorized File Access

Overview Versions of node-git-server prior to 0.6.1 are vulnerable to Unauthorized File Access. It is possible to access any git repository by using absolute paths, which may allow attackers to access private repositories. Recommendation Upgrade to version 0.6.1 or later. References - GitHub PR -...