Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/localhost-now@1.0.1
purl pkg:npm/localhost-now@1.0.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.9
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
CVE-2018-3729

localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious …
1.0.2
Vulnerable
GMS-2018-20

Path Traversal localhost-now suffers from a path traversal vulnerability. It allows reading the content of arbitrary files on the remote …
1.0.2
Vulnerable
npm-377
Aliases:
CVE-2018-3729
localhost-now Path Traversal allows to read content of arbitrary file
1.0.2
Vulnerable
npm-424

Bypass to defective fix of Path Traversal There are no reported fixed by versions.
GHSA-73cw-jxmm-qpgh
Aliases:
GMS-2019-132
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to path traversal. This vulnerability is a bypass to the … There are no reported fixed by versions.
GHSA-qwj8-p662-3m7x
Aliases:
CVE-2019-5416
Path Traversal in localhost-now All versions of `localhost-now` are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing … There are no reported fixed by versions.
This package is not known to fix any advisories.