Skip to content
OpenAdvisories
High · 7.5 CVE-2020-7681 EUVD-2021-1018GHSA-8pww-pp5r-rff8

Directory Traversal

Published Jul 25, 2020 · Updated Sep 16, 2024 · Assigned by snyk

Description

This affects all versions of package marscode. There is no path sanitization in the path provided at fs.readFile in index.js.

Affected products

VendorProductAffectedFixed
— marscode < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm marscode <= 1.0.1-0 — GHSA-8pww-pp5r-rff8

References