conductor-oss / conductor-oss/javascript-sdk

[GHSA-mw96-cpmx-2vgc] rollup@4.52.0: Arbitrary File Write via Path Traversal

Open
#112 1 comment 0 reactions 0 assignees View on GitHub
security vulnerability
Dominant language
TypeScript
Stars
58
Forks
20
Avg merge
1d 13h
Merged PRs (30d)
7

Description

## Vulnerability Report

| CVE | Library | Installed | Fixed |
|-----|---------|-----------|-------|
| GHSA-mw96-cpmx-2vgc | rollup | 4.52.0 | 4.59.0 |

### Summary
Rollup 4 has Arbitrary File Write via Path Traversal.

### References
- [GHSA-mw96-cpmx-2vgc](https://osv.dev/vulnerability/GHSA-mw96-cpmx-2vgc)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.