CVE-2020-7682
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - report@snyk.io
- Published
- 2020-07-25
- Last modified
- 2024-09-16
- Weaknesses
- CWE-22
Affected products
References
- https://snyk.io/vuln/SNYK-JS-MARKEDTREE-590121
