Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-56198

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

Description

path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

cabraviva path-sanitizer

  • < 3.1.0affected

References