An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTg4aDktZmM2di1qY3c3
Unintended Require in larvitbase-www
All versions of
larvitbase-www are vulnerable to an Unintended Require. The package exposes an API endpoint and passes a GET parameter unsanitized to an
require() call. This allows attackers to execute any
.js file in the same folder as the server is running.
No fix is currently available. Consider using an alternative package until a fix is made available.Permalink: https://github.com/advisories/GHSA-88h9-fc6v-jcw7
Source: GitHub Advisory Database
Published: about 3 years ago
Updated: 9 months ago
No known fixed version