Homepage
About Snyk

@simonsmith/cypress-image-snapshot@7.0.0-beta.3 vulnerabilities

Cypress Image Snapshot binds jest-image-snapshot's image diffing logic to Cypress commands.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @simonsmith/cypress-image-snapshot package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Directory Traversal

@simonsmith/cypress-image-snapshot is a Cypress Image Snapshot binds jest-image-snapshot's image diffing logic to Cypress.io commands.

Affected versions of this package are vulnerable to Directory Traversal. It's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test.

How to fix Directory Traversal?

Upgrade @simonsmith/cypress-image-snapshot to version 8.0.2 or higher.

<8.0.2
Go back to all versions of this package