Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
CVSS 3.0HIGH 7.5·Network·No auth·No interaction·EPSS 0.02833·Published 2019-04-03·Fixed in 1.0.6CWE-22
Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.
CVSS 3.0HIGH 7.5·Network·No auth·No interaction·EPSS 0.0165·Published 2019-02-01·Fixed in 1.0.7CWE-22