漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Vulnerability Description
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.
CVSS Information
N/A
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
path-sanitizer 路径遍历漏洞
Vulnerability Description
path-sanitizer是Cabra个人开发者的一个简单的轻量级 npm 包。 path-sanitizer 3.1.0之前版本存在路径遍历漏洞。攻击者利用该漏洞可以访问系统上的敏感文件或目录。
CVSS Information
N/A
Vulnerability Type
N/A