keystone@4.0.0-beta.7 vulnerabilities
Web Application Framework and Admin GUI / Content Management System built on Express.js and Mongoose
-
latest version
4.2.1
-
first published
11 years ago
-
latest version published
5 years ago
-
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the keystone package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
keystone is a Node.js content management system and web app framework built on the Express web framework and Mongoose ODM. Affected versions of this package are vulnerable to Arbitrary File Upload via the file upload module, due to missing sanitization, allowing an attacker to execute arbitrary code via a crafted file. How to fix Arbitrary File Upload? There is no fixed version for |
*
|