Description
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.
Remediation
References
https://hackerone.com/reports/384939
Related Vulnerabilities
CVE-2021-40525 Vulnerability in maven package org.apache.james:james-server
CVE-2021-33562 Vulnerability in maven package com.shopizer:shopizer
CVE-2020-28435 Vulnerability in npm package ffmpeg-sdk
CVE-2022-35954 Vulnerability in npm package @actions/core
CVE-2022-35915 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts-upgradeable