IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2024-12-31 16:15

MODIFIED

2024-12-31 16:15

EPSS (Prob. Exploit)

0.74%

Top 45.0%

DATA SOURCES:

NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-94p5-r7cc-3rpr CRITICAL

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

AFFECTED PACKAGES:

NPM / path-sanitizer

< 3.1.0

Fixed in: 3.1.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability

AFFECTED PACKAGES:

Unknown / Unknown

ALIASES:

GHSA-94p5-r7cc-3rpr

> HISTORIQUE DES MODIFICATIONS

Première apparition

31/12/2024 16:15

Source: NVD

📊 ENRICHISSEMENT 18/10/2025 14:58

CVEPROJECT

Champ modifié: CVE Project

Ancienne valeur:

Non

Nouvelle valeur:

Oui