Description
list-n-stream is a server for static files to list and stream local videos. list-n-stream v0.0.10 or lower is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | list-n-stream node module | <=0.0.10 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | list-n-stream | < 0.0.11 | 0.0.11 | GHSA-23vf-5g53-hm9q |