GHSA-2gjg-5x33-mmp2

GitHub Security Advisory

Path Traversal in localhost-now

✓ GitHub Reviewed HIGH Has CVE

Versions of `localhost-now` before 1.0.2 are vulnerable to path traversal. This allows a remote attacker to read the content of an arbitrary file.

## Recommendation

Update to version 1.0.2 or later.

npm localhost-now

Affected versions: 0 (fixed in 1.0.2)

CVE-2018-3729

GHSA ID

GHSA-2gjg-5x33-mmp2

Published

July 25, 2018 10:44 PM

Last Modified

March 1, 2023 1:47 AM

CVSS Score

7.5 /10

Primary Ecosystem

npm

Primary Package

localhost-now

GitHub Reviewed

✓ Yes

Last updated: July 4, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.