Description
This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.
Remediation
References
https://snyk.io/vuln/SNYK-JS-FASTHTTP-572892
Related Vulnerabilities
CVE-2020-19850 Vulnerability in npm package directus
CVE-2020-7789 Vulnerability in maven package org.webjars.npm:node-notifier
CVE-2017-16176 Vulnerability in npm package jansenstuffpleasework
CVE-2022-21191 Vulnerability in npm package global-modules-path
CVE-2021-3827 Vulnerability in maven package org.keycloak:keycloak-saml-core