npm/@evershop/evershop CVE-2023-46496: high 8.3, EPSS 1.19%

Directory Traversal in evershop

Action: Upgrade @evershop/evershop to 1.0.0-rc.8 or later.

npm i @evershop/evershop@1.0.0-rc.8

Affected

Fixed versions

Sources

• osv: GHSA-rwf3-w4jq-f4cm
• https://nvd.nist.gov/vuln/detail/CVE-2023-46496
• https://github.com/evershopcommerce/evershop/pull/338
• https://devhub.checkmarx.com/cve-details/CVE-2023-46496
• https://devhub.checkmarx.com/cve-details/Cx943be66a-54cc
• https://github.com/evershopcommerce/evershop

CVE-2023-46496 · published 2023-12-08T21:30:30Z · modified 2023-12-13T13:56:37.043644Z · JSON