Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

GHSA-v86x-f47q-f7f4

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-v86x-f47q-f7f4

Unauthorized File Access in atompm Versions of `atompm` prior to 0.8.2 are vulnerable to Unauthorized File Access. The package fails to sanitize relative paths in the URL for file downloads, allowing attackers to download arbitrary files from the system. ## Recommendation Upgrade to version 0.8.2 or later.

gitlab/npm/atompm/GMS-2020-82

Unauthorized File Access in atompm Versions of `atompm` are vulnerable to Unauthorized File Access. The package fails to sanitize relative paths in the URL for file downloads, allowing attackers to download arbitrary files from the system. Upgrade to or later.