simple-npm-registry@0.0.3 vulnerabilities

licenses detected
- Unknown
  >=0
View simple-npm-registry package health on Snyk Advisor Open this link in a new tab

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the simple-npm-registry package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Directory Traversal `simple-npm-registry` implements an npm registry which forwards requests to `registry.npmjs.org`. Affected versions of the package are vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following url `/..%2f..%2fetc/passwd` would result in `/etc/passwd` leak. How to fix Directory Traversal? There is no fix version for `simple-npm-registry`.	*
H Directory Traversal `simple-npm-registry` implements an npm registry which forwards requests to `registry.npmjs.org`. Affected versions of the package are vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following url `/..%2f..%2fetc/passwd` would result in `/etc/passwd` leak. How to fix Directory Traversal? There is no fix version for `simple-npm-registry`.	*

Directory Traversal

simple-npm-registry implements an npm registry which forwards requests to registry.npmjs.org.

Affected versions of the package are vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following url /..%2f..%2fetc/passwd would result in /etc/passwd leak.

How to fix Directory Traversal?

There is no fix version for simple-npm-registry.