Описание
Path Traversal in marked-tree
This affects all versions up to and including version 0.8.1 of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
Пакеты
Наименование
marked-tree
npm
Затронутые версииВерсия исправления
<= 0.8.1
Отсутствует
Связанные уязвимости
CVSS3: 7.5
nvd
больше 5 лет назад
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.