CVE-2024-47171
1 advisory.
npm/agnai CVE-2024-47171: medium 4.3
Agnai vulnerable to Relative Path Traversal in Image Upload
Action: Upgrade agnai to 1.0.330 or later.
npm i agnai@1.0.330Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.330 | - |
Fixed versions
| 1.0.330 |
Sources
- osv: GHSA-g54f-66mw-hv66
- https://github.com/agnaistic/agnai/security/advisories/GHSA-g54f-66mw-hv66
- https://nvd.nist.gov/vuln/detail/CVE-2024-47171
- https://github.com/agnaistic/agnai
- https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/character.ts#L140:
- https://github.com/agnaistic/agnai/blob/75abbd5b0f5e48ddecc805365cf1574d05ee1ce5/srv/api/upload.ts#L55
CVE-2024-47171 · published · modified · JSON