npm/@asymmetric-effort/nogginlessdom: high
@asymmetric-effort/nogginlessdom's Path Traversal in matchFileSnapshot allows arbitrary file write
Action: Upgrade @asymmetric-effort/nogginlessdom to 0.0.22 or later.
npm i @asymmetric-effort/nogginlessdom@0.0.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.22 | - |
Fixed versions
| 0.0.22 |
Sources
- osv: GHSA-322x-v876-g883
- https://github.com/asymmetric-effort/NogginLessDom/security/advisories/GHSA-322x-v876-g883
- https://github.com/asymmetric-effort/NogginLessDom/commit/785e6ac6e124d1a89b3ccf40bbd75fc8e4cb215d
- https://github.com/asymmetric-effort/NogginLessDom
published · modified · JSON