GHSA-x26f-26qw-hhhxHighCVSS 7.5
Path Traversal in hekto
🔗 CVE IDs covered (1)
📋 Description
Versions of hekto before 0.2.3 are vulnerable to path traversal. This allows a remote attacker to read content of arbitrary files.
Recommendation
Update to version 0.2.3 or later.
🎯 Affected products1
- npm/hekto:< 0.2.3