Skip to content
OpenAdvisories
High · 7.5 CVE-2025-8021 EUVD-2025-22415GHSA-3r3j-4vrw-884j

files-bucket-server vulnerable to Directory Traversal

Published Jul 23, 2025 · Updated Jul 23, 2025 · Assigned by snyk

Description

All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory.

Affected products

VendorProductAffectedFixed
— files-bucket-server — —

Affected packages

EcosystemPackageAffectedFixedRecord
npm files-bucket-server <= 1.2.6 — GHSA-3r3j-4vrw-884j

References