npm/@saltcorn/server: medium 4.9
@saltcorn/server arbitrary file and directory listing when accessing build mobile app results
Action: Upgrade @saltcorn/server to 1.0.0-beta.14 or later.
npm i @saltcorn/server@1.0.0-beta.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.0-beta.14 | - |
Fixed versions
| 1.0.0-beta.14 |
Sources
- osv: GHSA-cfqx-f43m-vfh7
- https://github.com/saltcorn/saltcorn/security/advisories/GHSA-cfqx-f43m-vfh7
- https://github.com/saltcorn/saltcorn/commit/81adaf78430a9b59804894574d67d2a0c7bb3dc5
- https://github.com/saltcorn/saltcorn
- https://github.com/saltcorn/saltcorn/blob/v1.0.0-beta.13/packages/server/routes/admin.js#L2884-L2893
published · modified · JSON