public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.02007·Published 2018-06-07·Fixed in 0.1.3CWE-22