Description
glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a malicious user to read content of any file with known path.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | glance node module | Versions before 3.0.4 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | glance | < 3.0.4 | 3.0.4 | GHSA-2x4q-6jfv-8h9h |