mapshaper Path Traversal vulnerability

Description

Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44.

Recommendation

Update the mapshaper package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.6.44
• Patched version(s): 0.6.44

References

• GHSA-8m36-62rw-9mxw
• huntr.com
• CVE-2024-1163
• CWE-22
• CWE-400
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Langchain Path Traversal vulnerability - CVE-2024-7774
• Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818
• static-server Path Traversal vulnerability - CVE-2023-26152
• jsPDF has Local File Inclusion/Path Traversal vulnerability - CVE-2025-68428

Tags:

npm

mapshaper