HIGH7.6
GHSA-w6cx-qg2q-rvq8
Path Traversal in @finastra/ssr-pages
Quick fix
GHSA-w6cx-qg2q-rvq8 — @finastra/ssr-pages: upgrade to the fixed version with the command below.
npm install @finastra/ssr-pages@0.1.4Details
A path traversal issue can occur when providing untrusted input to the `svg` property as an argument to the `build(MessagePageOptions)` function.
### References - https://github.com/Finastra/ssr-pages/pull/1 - https://github.com/Finastra/ssr-pages/pull/1/commits/c3e4c563384ae3ba3892f37dd190218577620780
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/Finastra/ssr-pages/security/advisories/GHSA-w6cx-qg2q-rvq8[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2022-24718[ADVISORY]
- https://github.com/Finastra/ssr-pages/pull/1[WEB]
- https://github.com/Finastra/ssr-pages/pull/1/commits/c3e4c563384ae3ba3892f37dd190218577620780[WEB]
- https://github.com/Finastra/ssr-pages[PACKAGE]