| Package | Affected versions | Patched versions |
|---|---|---|
| sonicjs | ≥ 0.5.4, ≤ 0.7.0 |
SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free