verdaccio/monorepo

Releases200

Frequency1 week 5 days

Last Release3 months ago

Stars85

🏰 Core dependencies and plugins for verdaccio 6.x branch ⚠️ DEPRECATED

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-31529NVD↗	<= 2021-03-03	Jul 11, 2022Monday, 11 July 2022, 01:15	9.3 CRITICAL	6.4 MEDIUM
The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.