Description
gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gaoxuyan
https://nodesecurity.io/advisories/378
Related Vulnerabilities
CVE-2021-23380 Vulnerability in npm package roar-pidusage
CVE-2022-31193 Vulnerability in maven package org.dspace:dspace-jspui
CVE-2020-29455 Vulnerability in npm package liveaddress
CVE-2022-25852 Vulnerability in npm package libpq
CVE-2022-42920 Vulnerability in maven package org.apache.bcel:bcel