Skip to content
OpenAdvisories

Package · npm

sapper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    GHSA-f3vw-587g-r29g

    Path Traversal in sapper

    Versions of `sapper` prior to 0.27.11 are vulnerable to Path Traversal. It is possible to access sensitive files on the server through HTTP requests containing URL-encoded `../`. You may test a `sapper` application running in prod mode with `curl -vvv http://…

    sapper npm