GHSA-2gjg-5x33-mmp2HighCVSS 7.5

Path Traversal in localhost-now

Published
July 25, 2018
Last Modified
March 1, 2023

🔗 CVE IDs covered (1)

CVE-2018-3729 →

📋 Description

Versions of localhost-now before 1.0.2 are vulnerable to path traversal. This allows a remote attacker to read the content of an arbitrary file.

Recommendation

Update to version 1.0.2 or later.

🎯 Affected products1

  • npm/localhost-now:< 1.0.2

🔗 References (5)