HIGH7.5
GHSA-5jqc-qj57-4hrc
Jan path traversal vulnerability
Details
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/@janhq/core
Introduced in:
0No fixed version published yet for @janhq/core (npm). Pin to a known-safe version or switch to an alternative.