| Package | Affected versions | Patched versions |
|---|---|---|
| halo | = 1.1.3 |
An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input path parameter, but the startsWith function can be used to bypass it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free