mapshaper Path Traversal vulnerability

Description

Path Traversal in GitHub repository mbloch/mapshaper prior to 0.6.44.

Recommendation

Update the mapshaper package to the latest compatible version. Followings are version details:

• Affected version(s): < 0.6.44
• Patched version(s): 0.6.44

References

• GHSA-8m36-62rw-9mxw
• huntr.com
• CVE-2024-1163
• CWE-22
• CWE-400
• CAPEC-310
• OWASP 2021-A1
• OWASP 2021-A6

Related Issues

• Jan path traversal vulnerability - CVE-2024-37273
• Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818
• Jan path traversal vulnerability - @janhq/core - GHSA-5jqc-qj57-4hrc - CVE-2024-36857
• Jan path traversal vulnerability - @janhq/core - CVE-2024-36858

You might also like:

Apache and Express Path Traversal plus Nginx Restriction Bypass Tests with SmartScanner

Exploiting Server Version Disclosure

CSRF, XXE, and 12 Other Security Acronyms Explained

Tags:

npm

mapshaper