GHSA-3r3j-4vrw-884jHighCVSS 7.5

files-bucket-server vulnerable to Directory Traversal

Published
July 23, 2025
Last Modified
September 26, 2025

🔗 CVE IDs covered (1)

📋 Description

All versions of the package files-bucket-server are vulnerable to Directory Traversal, where an attacker can traverse the file system and access files outside of the intended directory.

🎯 Affected products1

  • npm/files-bucket-server:<= 1.2.6

🔗 References (4)