HIGH

GHSA-8h8v-6qqm-fwpq

Path Traversal in express-cart

Quick fix

GHSA-8h8v-6qqm-fwpq — express-cart: upgrade to the fixed version with the command below.

npm install express-cart@1.1.7

Details

Versions of `express-cart` before 1.1.7 are vulnerable to Path Traversal.

## Recommendation

Update to version 1.1.7 or later.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.1.7

Fixnpm install express-cart@1.1.7