fs.mkdtemp() and fs.mkdtempSync() are missing getValidatedPath() checks.

Disclosed: 2023-08-11 16:38:37 By haxatron1 To nodejs

Low

Vulnerability Details

No vulnerability description provided or it is restricted.

Actions

View on HackerOne

Report Stats

Report ID: 2037887
State: Closed
Substate: resolved
Upvotes: 3

Share this report