mapshaper Path Traversal vulnerability

Description

Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44.

Recommendation

Update the mapshaper package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.6.44
• Patched version(s): 0.6.44

References

• GHSA-8m36-62rw-9mxw
• huntr.com
• CVE-2024-1163
• CWE-22
• CWE-400
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818
• Langchain Path Traversal vulnerability - CVE-2024-7774
• Path traversal in webpack-dev-middleware - CVE-2024-29180
• Nuxt Devtools has a Path Traversal: '../filedir - CVE-2024-23657

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

Exploiting Server Version Disclosure

CSRF, XXE, and 12 Other Security Acronyms Explained

Tags:

npm

mapshaper