npmPackage

psitransfer

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2026-41180High 7.5
PsiTransfer: Upload PATCH path traversal can create `config.<NODE_ENV>.js` and lead to code execution on restart
Affected: fixed in 2.4.3.
Fixed in 2.4.3 (released Apr 14, 2026, 9 days before disclosure).
The latest release, 2.4.5, is not affected.
72% of psitransfer downloads last week were affected versions (152).
CVE-2024-31454Medium 6.5
PsiTransfer file integrity violation vulnerability
Affected: fixed in 2.2.0.
Fixed in 2.2.0 (released Apr 5, 2024, 4 days before disclosure).
The latest release, 2.4.5, is not affected.
30% of psitransfer downloads last week were affected versions (62).
CVE-2024-31453Medium 6.5
PsiTransfer vulnerable to violation of the integrity of file distribution
Affected: fixed in 2.2.0.
Fixed in 2.2.0 (released Apr 5, 2024, 4 days before disclosure).
The latest release, 2.4.5, is not affected.
30% of psitransfer downloads last week were affected versions (62).