Skip to content
OpenAdvisories

Package · npm

public

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    GHSA-4vvp-x9h2-x2vf

    Path Traversal in public

    All versions of `public` are vulnerable to Path Traversal. This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL. ## Recommendation No fix is currently available. Do not use `public` in product…

    public npm
  • Medium 6.1
    CVE-2018-16480

    Tnantoka/public XSS Vulnerability

    A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.

    HackerOne public public npm
  • Medium 6.1
    CVE-2018-3747

    Cross-Site Scripting in public

    The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript.

    public npm