CVE-2024-36858
1 advisory.
npm/@janhq/core CVE-2024-36858: critical 9.8
Jan path traversal vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.11 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-qfjh-mvq6-c5p8
- https://nvd.nist.gov/vuln/detail/CVE-2024-36858
- https://github.com/janhq/jan/pull/3152
- https://github.com/HackAllSec/CVEs/tree/main/Jan%20Arbitrary%20File%20Upload%20vulnerability
- https://github.com/janhq/jan
CVE-2024-36858 · published · modified · JSON