CVE-2018-3758
1 advisory.
npm/express-cart CVE-2018-3758: high 8.8
express-cart unrestricted file upload vulnerability
Action: Upgrade express-cart to 1.1.7 or later.
npm i express-cart@1.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.7 | - |
Fixed versions
| 1.1.7 |
Sources
- osv: GHSA-4w62-cq5r-5mmq
- https://nvd.nist.gov/vuln/detail/CVE-2018-3758
- https://github.com/mrvautin/expressCart/commit/65b18cfe426fa217aa6ada1d4162891883137893
- https://hackerone.com/reports/343726
CVE-2018-3758 · published · modified · JSON