GHSA-3hvm-hgpw-rx4jHighCVSS 7.5
Path Traversal in knightjs
🔗 CVE IDs covered (1)
📋 Description
All versions of knightjs are vulnerable to Path Traversal.
This vulnerability allows an attacker to read content of arbitrary files on the server due to lack of input validation.
Recommendation
As there is currently no fix for this module we recommend not using this module in production environments.
🎯 Affected products1
- npm/knightjs:<= 0.0.1