GHSA-wwfj-h843-3hrq

GitHub Security Advisory

FUXA local file inclusion vulnerability

✓ GitHub Reviewed HIGH Has CVE

FUXA <= 1.1.12 is vulnerable to Local File Inclusion via `/api/download`.

npm fuxa-server

Affected versions: 0 (last affected: 1.1.12)

CVE-2023-31718

GHSA ID

GHSA-wwfj-h843-3hrq

Published

September 22, 2023 12:30 AM

Last Modified

September 25, 2023 9:42 PM

CVSS Score

7.5 /10

Primary Ecosystem

npm

Primary Package

fuxa-server

GitHub Reviewed

✓ Yes

Last updated: July 31, 2025 6:36 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.