2 matches found
GHSA-HRVQ-X7JP-36XV Nx: Path traversal in nx migrate package-migrations extraction
Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...
Nx: Path traversal in nx migrate package-migrations extraction
Summary nx migrate reads each target package's nx-migrations.migrations value from its manifest and extracts the referenced file to a path built by joining that value onto a temporary directory. The value is never validated, so a package whose migrations field contains .. segments or an absolute...