What is GHSA-8m36-62rw-9mxw?

GHSA-8m36-62rw-9mxw is a security advisory published by GitHub Security Advisories with Medium severity. mapshaper Path Traversal vulnerability

Which CVE IDs does GHSA-8m36-62rw-9mxw cover?

GHSA-8m36-62rw-9mxw covers the following CVE IDs: CVE-2024-1163. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8m36-62rw-9mxw?

GHSA-8m36-62rw-9mxw has a CVSS v3 base score of 6.8, published by GitHub Security Advisories.

Which products are affected by GHSA-8m36-62rw-9mxw?

GHSA-8m36-62rw-9mxw affects 1 product, including: npm/mapshaper:\u003c 0.6.44.

GHSA-8m36-62rw-9mxwMediumCVSS 6.8

mapshaper Path Traversal vulnerability

Vendor

GitHub Security Advisories

Published

February 13, 2024

Last Modified

March 17, 2026

🔗 CVE IDs covered (1)

CVE-2024-1163 →

📋 Description

Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44.

🎯 Affected products1

npm/mapshaper:< 0.6.44

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2024-1163
https://github.com/mbloch/mapshaper/commit/7437d903c0a87802c3751fc529d2de7098094c72
https://huntr.com/bounties/c1cbc18b-e4ab-4332-ad13-0033f0f976f5
https://github.com/advisories/GHSA-8m36-62rw-9mxw