com.github.jlangch:venice@1.9.18 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the com.github.jlangch:venice package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Directory Traversal

Affected versions of this package are vulnerable to Directory Traversal via the load-file and load-resource functions. This is exploitable only when an absolute path, whose name prefix matches a load path, is passed to the two vulnerable functions.

For example, if the configured load path is: /Users/foo/resources, the attacker can exploit this vulnerability to traverse to Users/foo/resources-alt which is outside the directory.

How to fix Directory Traversal?

Upgrade com.github.jlangch:venice to version 1.10.17 or higher.

[,1.10.17)