Directory Traversal

Description

Affected versions of node-simple-router package (0.10.0 and before), are vulnerable to a directory traversal issue.

Recommendation

Update the node-simple-router package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.10.1
• Patched version(s): 0.10.1

References

• GHSA-f6gj-7592-5jxm

Related Issues

• Directory Traversal in node-simple-router - CVE-2017-16083
• Redwood is vulnerable to account takeover via dbAuth "forgot-password - Vulnerability
• Parse Server before v3.4.1 vulnerable to Denial of Service - CVE-2019-1020012
• Incorrect default cookie name and recommendation - Vulnerability

Tags:

npm

node-simple-router