GHSA-fm87-46vv-jqrr

GitHub Security Advisory

Path Traversal in html-pages

✓ GitHub Reviewed CRITICAL Has CVE

Versions of `html-pages` before 2.1.0 are vulnerable to path traversal.

## Recommendation

Update to version 2.1.0 or later.

npm html-pages

Affected versions: 0 (last affected: 2.1.2)

CVE-2018-3744

GHSA ID

GHSA-fm87-46vv-jqrr

Published

September 18, 2018 1:45 PM

Last Modified

January 31, 2023 1:40 AM

CVSS Score

9.0 /10

Primary Ecosystem

npm

Primary Package

html-pages

GitHub Reviewed

✓ Yes

Last updated: July 6, 2025 6:30 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.