Description
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | html-pages node module | Not fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | html-pages | <= 2.1.2 | — | GHSA-fm87-46vv-jqrr |