NetSight
high7.5

CVE-2020-7687

Directory traversal in fast-http

Impact

This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.

Affected packages

EcosystemPackageAffectedFixed in
npmfast-http<= 0.1.3none recorded

Affected products

VendorProductAffected versions
Fast-Http ProjectFast-Http
All versions

Weakness classification

References