Skip to content
OpenAdvisories

Package · npm

fs-path

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2020-8298 EPSS 11%

    Command injection in fs-path

    fs-path node module before 0.0.25 is vulnerable to command injection by way of user-supplied inputs via the `copy`, `copySync`, `remove`, and `removeSync` methods.

    fs-path npm
  • High —
    GHSA-gc94-6w89-hpqr

    Command Injection in fs-path

    All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in. ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.

    fs-path npm