GitHub Advisoryadvisory · npm

GHSA-8h8v-6qqm-fwpq Path Traversal in express-cart

HIGH Published 2020-09-01 Modified 2020-08-31 Official page ↗

Ecosystem: npm
Packages: express-cart
Severity: High
Weaknesses: CWE-22
Reviewed: 2020-08-31

Affected packages

• npm express-cart: < 1.1.7 → fixed in 1.1.7

Description

Versions of `express-cart` before 1.1.7 are vulnerable to Path Traversal. Recommendation Update to version 1.1.7 or later.

Related

Weakness · CWE (1)

CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References