npm/sencisho CVE-2017-16092: high 7.5, EPSS 1.97%
Directory Traversal in sencisho
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-6866-x7cf-rmh5
- https://nvd.nist.gov/vuln/detail/CVE-2017-16092
- https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/sencisho
- https://github.com/advisories/GHSA-6866-x7cf-rmh5
- https://www.npmjs.com/advisories/340
CVE-2017-16092 · published · modified · JSON