Skip to content
OpenAdvisories

Package · npm

takeapeek

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High —
    GHSA-4q2f-8g74-qm56

    Cross-Site Scripting in takeapeek

    All versions of `takeapeek` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. ## Recommendation…

    takeapeek npm
  • Medium 5.3
    CVE-2018-16473

    Path Traversal in takeapeek

    A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.

    npm takeapeek takeapeek npm