Skip to main content
cve.nowby Sazabi
← npm
npmPackage

buttle

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
npm

Advisories 2

  • XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an…

    Affected: through 0.2.0.

  • Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server.

    Affected: through 0.2.0.