Skip to main content
cve.nowby Sazabi
← npm
npmPackage

public

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
npm

Advisories 3

  • A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of…

    Affected: fixed in 0.1.4.

  • The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious…

    Affected: fixed in 0.1.4.

  • public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to…

    Affected: fixed in 0.1.3.