GHSA-x26f-26qw-hhhx

GitHub Security Advisory

Path Traversal in hekto

✓ GitHub Reviewed HIGH Has CVE

Versions of `hekto` before 0.2.3 are vulnerable to path traversal. This allows a remote attacker to read content of arbitrary files.

## Recommendation

Update to version 0.2.3 or later.

npm hekto

Affected versions: 0 (fixed in 0.2.3)

CVE-2018-3725

GHSA ID

GHSA-x26f-26qw-hhhx

Published

July 26, 2018 3:22 PM

Last Modified

January 31, 2023 1:37 AM

CVSS Score

7.5 /10

Primary Ecosystem

npm

Primary Package

hekto

GitHub Reviewed

✓ Yes

Last updated: July 2, 2025 6:26 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.