Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/localhost-now@1.0.2
purl pkg:npm/localhost-now@1.0.2
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2019-5416

Path Traversal A path traversal vulnerability in localhost-now allows the attackers to read content of arbitrary files on the remote … There are no reported fixed by versions.
npm-424

Bypass to defective fix of Path Traversal There are no reported fixed by versions.
GHSA-73cw-jxmm-qpgh
Aliases:
GMS-2019-132
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to path traversal. This vulnerability is a bypass to the … There are no reported fixed by versions.
GHSA-qwj8-p662-3m7x
Aliases:
CVE-2019-5416
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing … There are no reported fixed by versions.
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2018-3729
localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious …
GMS-2018-20
Path Traversal localhost-now suffers from a path traversal vulnerability. It allows reading the content of arbitrary files on the remote …
npm-377
localhost-now Path Traversal allows to read content of arbitrary file CVE-2018-3729