Skip to content
OpenAdvisories

Package · npm

path-sanitizer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.3
    CVE-2024-56198

    path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

    path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.

    cabraviva path-sanitizer path-sanitizer npm