path-sanitizer

npm1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting path-sanitizerpage 1 of 1

CVE-2024-56198CRITICALCVSS 9.3EG 9.3✓ Fixed in 3.1.0
2024-12-31
path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.

Check whether path-sanitizer is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for path-sanitizer CVEs against the assets you own.

Start Free Scan →