Npm Takeapeek vulnerabilities

2 vulnerabilities

Known vulnerabilities in Npm Takeapeek, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

GHSA-4q2f-8g74-qm56npmtakeapeekCross-Site Scripting in takeapeek All versions of `takeapeek` are vulnerable to Cross-Site Scripting (XSS). The package fails to sanitize filenames, allowing attackers to execute arbitrary JavaScript in the victim's browser through files with names containing malicious code. ## Recommendation No fix is currently available. Consider using an alternative package until a fix is made available.5.3CVE-2018-16473npmtakeapeek+1
EPSS score
1.37%
A path traversal in takeapeek module versions <=0.2.2 allows an attacker to list directory and files.