| Package | Affected versions | Patched versions |
|---|---|---|
| gollum | < 4.0.1 | 4.0.1 |
| gollum | ≤ 4.0 |
The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free