node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| node-red-contrib-huemagic(npm) | 0 | N/A | N/A |
CVSS Metrics
