Skip to content
OpenAdvisories

Package · npm

larvitbase-www

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-88h9-fc6v-jcw7

    Unintended Require in larvitbase-www

    All versions of `larvitbase-www` are vulnerable to an Unintended Require. The package exposes an API endpoint and passes a GET parameter unsanitized to an `require()` call. This allows attackers to execute any `.js` file in the same folder as the server is ru…

    larvitbase-www npm