HIGH

GHSA-2hhw-p8mg-jrm6

Path Traversal in http-live-simulator

Quick fix

GHSA-2hhw-p8mg-jrm6 — http-live-simulator: upgrade to the fixed version with the command below.

npm install http-live-simulator@1.0.6

Details

Versions of `http-live-simulator` prior to 1.0.6 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

## Recommendation

Upgrade to version 1.0.6

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/http-live-simulator

Introduced in: 0Fixed in: 1.0.6

Fixnpm install http-live-simulator@1.0.6

References

https://nvd.nist.gov/vuln/detail/CVE-2019-5423[ADVISORY]
https://hackerone.com/reports/384939[WEB]
https://github.com/advisories/GHSA-2hhw-p8mg-jrm6[ADVISORY]
https://www.npmjs.com/advisories/799[WEB]