All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory.
References:GSA_kwCzR0hTQS0zcjNqLTR2cnctODg0as4ABKcD
files-bucket-server vulnerable to Directory Traversal
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| npm:files-bucket-server | <= 1.2.6 | No known fixed version | |
Affected Version RangesAll affected versions1.0.0, 1.1.0, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6 |
|||