Public.Js Project Public.Js vulnerabilities

2 vulnerabilities

Known vulnerabilities in Public.Js Project Public.Js, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2018-3731hackeronepublic node module+2
EPSS score
2.01%
public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.6.1CVE-2018-3747Npmpublic+1
EPSS score
0.93%
The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript.