Vendor
BKDDFS
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.5
Shamefile has an arbitrary file read via shamefile.yaml in shame next
Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vulnerability in `shame next` allows an attacker-controlled `shamefile.yaml` to disclose contents of files outside the repository, one line at a time, to the term…