A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options determine the path.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| socket.io-file(npm) | 0 | N/A | N/A |
CVSS Metrics
