Homepage
About Snyk

weave@0.45.0 vulnerabilities

A toolkit for building composable interactive data driven applications.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the weave package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Path Traversal

weave is an A toolkit for building composable interactive data driven applications.

Affected versions of this package are vulnerable to Path Traversal due to a lack of input validation in the server API. An attacker can leak arbitrary files by manipulating file paths to traverse outside the intended directory.

Note: In various common scenarios, this allows a low-privileged user to assume the role of the server admin.

How to fix Path Traversal?

Upgrade weave to version 0.50.8 or higher.

[,0.50.8)
Go back to all versions of this package