Read the docs

Public.js Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Public.js Project records in CISA KEV

No Public.js Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Public.js · all components

Priority LOW 37

public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02007 Published 2018-06-07 Fixed in 0.1.3 CWE-22
Open these records in search →