npm/psitransfer: high 8.1
PsiTransfer has Zip Slip Path Traversal via TAR Archive Download
Action: Upgrade psitransfer to 2.3.1 or later.
npm i psitransfer@2.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.1 | - |
Fixed versions
| 2.3.1 |
Sources
- osv: GHSA-xphh-5v4r-r3rx
- https://github.com/psi-4ward/psitransfer/security/advisories/GHSA-xphh-5v4r-r3rx
- https://github.com/psi-4ward/psitransfer/commit/6c71bc0b8afa1ffa7aabd6c5fb28677651fd57b6
- https://github.com/psi-4ward/psitransfer
- https://github.com/psi-4ward/psitransfer/releases/tag/v2.3.1
published · modified · JSON