MEDIUM6.5
GHSA-grv5-w5vr-8h98
Path Traversal in droppy
Details
This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/droppy
Introduced in:
0No fixed version published yet for droppy (npm). Pin to a known-safe version or switch to an alternative.