Homepage

weave@0.20.0 vulnerabilities

A toolkit for building composable interactive data driven applications.

  • latest version

    0.51.43

  • latest non vulnerable version

    0.51.43

  • first published

    1 years ago

  • latest version published

    4 days ago

  • licenses detected

  • View weave package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the weave package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Path Traversal

    weave is an A toolkit for building composable interactive data driven applications.

    Affected versions of this package are vulnerable to Path Traversal due to a lack of input validation in the server API. An attacker can leak arbitrary files by manipulating file paths to traverse outside the intended directory.

    Note: In various common scenarios, this allows a low-privileged user to assume the role of the server admin.

    How to fix Path Traversal?

    Upgrade weave to version 0.50.8 or higher.

    [,0.50.8)
    Go back to all versions of this package