CVE-2018-3715

The CVE-2018-3715 entry is supported by multiple connected records showing a Path Traversal vulnerability in the npm package glance. Affected versions are before 3.0.9 (Red Hat/OSV notes) with related advisories indicating the root cause is lack of validation of the requested path, allowing a mal...

CVE-2022-25937

CVE-2022-25937 affects the npm package “glance.” Versions before 3.0.9 are vulnerable to a directory traversal flaw that allows reading files outside the public root directory. The issue is a root-cause in path handling and is related to but distinct from CVE-2018-3715. The commonly cited fix is ...