GHSA-26hg-crh6-mjrw

Source

https://github.com/advisories/GHSA-26hg-crh6-mjrw

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-26hg-crh6-mjrw/GHSA-26hg-crh6-mjrw.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-26hg-crh6-mjrw

Withdrawn

2021-02-23T21:28:28Z

Published

2021-02-23T21:28:28Z

Modified

2021-02-23T21:28:28Z

Summary

Directory Traversal

Details

Affected versions of list-n-stream package (0.0.10 and before), are vulnerable to a directory traversal issue.

Database specific

{
    "cwe_ids":  [],
    "github_reviewed":  true,
    "github_reviewed_at":  "2019-05-29T20:01:50Z",
    "nvd_published_at":  null,
    "severity":  "HIGH"
}

References

https://github.com/KoryNunn/list-n-stream/commit/99b0b40b34aaedfcdf25da46bef0a06b9c47fb59#diff-78c12f5adc1848d13b1c6f07055d996e

Affected packages

npm / list-n-stream

Package

Name: list-n-stream; View open source insights on deps.dev
Purl: pkg:npm/list-n-stream

Affected ranges

Type: SEMVER
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.0.11

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/02/GHSA-26hg-crh6-mjrw/GHSA-26hg-crh6-mjrw.json"