Description
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| cabraviva | path-sanitizer | < 3.1.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | path-sanitizer | < 3.1.0 | 3.1.0 | GHSA-94p5-r7cc-3rpr |