GHSA-wv2f-3rxv-jqhp

GitHub Security Advisory

Path Traversal in general-file-server

✓ GitHub Reviewed HIGH Has CVE

All versions of `general-file-server` are vulnerable to path traversal.

## Recommendation

No fix is currently available for this vulnerability. It is our recommendation to not use this module until a fix has been provided.

npm general-file-server

Affected versions: 0 (last affected: 1.1.8)

CVE-2018-3724

GHSA ID

GHSA-wv2f-3rxv-jqhp

Published

July 26, 2018 3:21 PM

Last Modified

September 7, 2023 10:28 PM

CVSS Score

7.5 /10

Primary Ecosystem

npm

Primary Package

general-file-server

GitHub Reviewed

✓ Yes

Last updated: July 4, 2025 6:27 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.