MEDIUM
GHSA-vw7g-jq9m-3q9v
Unauthorized File Access in glance
Quick fix
GHSA-vw7g-jq9m-3q9v — glance: upgrade to the fixed version with the command below.
npm install glance@3.0.7Details
Versions of `glance` prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a `--nodot` option meant to hide files and directories with names that begin with a `.`, such as `.git` but fails to hide files inside a folder that begins with `.`.
## Recommendation
Upgrade to version 3.0.7 or later.
Are you affected?
Enter the version of the package you're using.