Skip to content
OpenAdvisories
High · 7.5 CVE-2020-7687 EUVD-2020-0543GHSA-7phr-5m9x-rw9q

Directory Traversal

Published Jul 25, 2020 · Updated Sep 17, 2024 · Assigned by snyk

Description

This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.

Affected products

VendorProductAffectedFixed
— fast-http < unspecified unspecified

Affected packages

EcosystemPackageAffectedFixedRecord
npm fast-http <= 0.1.3 — GHSA-7phr-5m9x-rw9q

References