Skip to content
OpenAdvisories

Package · npm

oceanic.js

1 known vulnerabilities.

1 result · Feed

  • Medium 6.5

    Oceanic allows unsanitized user input to lead to path traversal in URLs

    Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as `Client.rest.channels.removeBan` is not url-encoded, resulting in specially crafted input such as `../../../channels/{id}` being normalized into the …