Http-live-simulator Project - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2019-04-03.

Products

• Http-live-simulator - 2 CVEs

Newest CVEs of Http-live-simulator Project

• CVE-2019-5423 - CVSS 7.5 (high), 2019-04-03: Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
• CVE-2018-16479 - CVSS 7.5 (high), 2019-02-01: Path traversal vulnerability in http-live-simulator <1.0.7 causes unauthorized access to arbitrary files on disk by appending extra slashes after the URL.