Skip to content
OpenAdvisories

Package · npm

better-helperjs

1 known vulnerabilities.

1 result · Feed

  • High 7.5

    better-helperjs Vulnerable to Directory Traversal via String Prefix Bypass in Static Server

    ## Summary A directory traversal vulnerability exists in the production static file server of `better-helperjs` (`<= 3.0.5`). Attackers can read arbitrary files located in adjacent directory structures that share the same string prefix as the intended static …