Skip to content
OpenAdvisories

Vendor

OceanicJS

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    Oceanic allows unsanitized user input to lead to path traversal in URLs

    Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as `Client.rest.channels.removeBan` is not url-encoded, resulting in specially crafted input such as `../../../channels/{id}` being normalized into the …