CVE-2024-56198 — path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a pat…
Published: 2024-12-31 · CVSS: 9.3 · CVSS 4.0
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7