Description
This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js.
Remediation
References
https://snyk.io/vuln/SNYK-JS-MARKEDTREE-590121
Related Vulnerabilities
CVE-2022-45390 Vulnerability in maven package io.loader:loaderio-jenkins-plugin
CVE-2022-36099 Vulnerability in maven package org.xwiki.platform:xwiki-platform-wiki-ui-mainwiki
CVE-2020-26217 Vulnerability in maven package org.jvnet.hudson:xstream
CVE-2022-4640 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2022-24785 Vulnerability in maven package org.webjars.bowergithub.moment:moment