Skip to content
OpenAdvisories

Package · npm

@janhq/core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2024-37273

    Jan path traversal vulnerability

    An arbitrary file upload vulnerability in the /v1/app/appendFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

    @janhq/core npm
  • Critical 9.8
    CVE-2024-36858 Scanner template

    Jan path traversal vulnerability

    An arbitrary file upload vulnerability in the /v1/app/writeFileSync interface of Jan v0.4.12 allows attackers to execute arbitrary code via uploading a crafted file.

    @janhq/core npm
  • High 7.5
    CVE-2024-36857 Scanner template

    Jan path traversal vulnerability

    Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

    @janhq/core npm