Description
This affects all versions of package fast-http. There is no path sanitization in the path provided at fs.readFile in index.js.
Remediation
References
https://snyk.io/vuln/SNYK-JS-FASTHTTP-572892
Related Vulnerabilities
CVE-2022-23223 Vulnerability in maven package org.apache.shenyu:shenyu-common
CVE-2021-23381 Vulnerability in npm package killing
CVE-2020-9483 Vulnerability in maven package org.apache.skywalking:server-storage-plugin
CVE-2020-11994 Vulnerability in maven package org.apache.camel:camel-robotframework