Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wm77-q74p-5763

Опубликовано: 27 июл. 2018
Источник: github
Github: Прошло ревью

Описание

Path Traversal in superstatic

Affected of superstatic are vulnerable to path traversal when used on Windows.

Additionally, it is vulnerable to path traversal on other platforms combined with certain Node.js versions which erroneously normalize \\ to / in paths on all platforms (a known example being Node.js v9.9.0).

Recommendation

Update to version 5.0.2 or later.

Пакеты

Наименование

superstatic

npm
Затронутые версииВерсия исправления

< 5.0.2

5.0.2

Дефекты

CWE-177

Дефекты

CWE-177