Description
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MARKEDTREE-590121
Related Vulnerabilities
CVE-2021-23438 Vulnerability in npm package mpath
CVE-2021-21293 Vulnerability in maven package org.http4s:blaze-core_2.13
CVE-2019-10786 Vulnerability in npm package network-manager
CVE-2021-40690 Vulnerability in maven package org.apache.santuario:xmlsec
CVE-2018-12542 Vulnerability in maven package io.vertx:vertx-web