CVE-2024-56198
1 advisory.
npm/path-sanitizer CVE-2024-56198: critical 9.3, EPSS 0.74%
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Action: Upgrade path-sanitizer to 3.1.0 or later.
npm i path-sanitizer@3.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-94p5-r7cc-3rpr
- nvd: CVE-2024-56198
- https://github.com/cabraviva/path-sanitizer/security/advisories/GHSA-94p5-r7cc-3rpr
- https://github.com/cabraviva/path-sanitizer/commit/b6d2319eac910dffdfacc8460f5b5cc5a1518ead
- https://github.com/cabraviva/path-sanitizer
- https://www.loom.com/share/b766ece5193842848ce7562fcd559256?sid=fd826eb6-0eee-4601-bf0e-9cfee5c56e9d
CVE-2024-56198 · published · modified · JSON