Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/localhost-now@0.1.3
purl pkg:npm/localhost-now@0.1.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (5)
Advisory Summary Fixed in package version
GMS-2018-20

Path Traversal localhost-now suffers from a path traversal vulnerability. It allows reading the content of arbitrary files on the remote …
1.0.2
Vulnerable
npm-377
Aliases:
CVE-2018-3729
localhost-now Path Traversal allows to read content of arbitrary file
1.0.2
Vulnerable
npm-424

Bypass to defective fix of Path Traversal There are no reported fixed by versions.
GHSA-73cw-jxmm-qpgh
Aliases:
GMS-2019-132
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to path traversal. This vulnerability is a bypass to the … There are no reported fixed by versions.
GHSA-qwj8-p662-3m7x
Aliases:
CVE-2019-5416
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing … There are no reported fixed by versions.
This package is not known to fix any advisories.