Skip to content
OpenAdvisories

Package · npm

whistle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.7
    CVE-2026-55629

    Whistle: Path traversal

    Whistle is an HTTP, HTTP2, HTTPS, and WebSocket debugging proxy. Prior to 2.10.3, lib/service/service.js handles GET /cgi-bin/temp/get by reading req.query.filename, joining it to TEMP_FILES_PATH only when it matches the temporary file pattern, and otherwise …

    avwo whistle whistle npm
  • High 8.8
    CVE-2024-55500

    Avenwu Whistle Cross-Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) in Avenwu Whistle v.2.9.90 and before allows attackers to perform malicious API calls, resulting in the execution of arbitrary code on the victim's machine.

    whistle npm