Description
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | marked-tree | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | marked-tree | <= 0.8.1 | — | GHSA-xr8h-53xr-jhcm |