Http-live-simulator (Http-live-simulator Project) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 10 known versions, newest CVE from 2019-04-03. Vendor: Http-live-simulator Project.

CVEs of Http-live-simulator

• CVE-2019-5423 - CVSS 7.5 (high), 2019-04-03: Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
• CVE-2018-16479 - CVSS 7.5 (high), 2019-02-01: Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.