GHSA-rv49-54qp-fw42
Path Traversal in servey
GHSA-rv49-54qp-fw42 is a vulnerability with no CVSS score yet in servey, published June 6, 2019. No source lists public exploit code. Fixed in servey 3.1.0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
3.1.0servey
Description
Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
Upgrade to the latest version
Affected packages
| Package | Affected | Fixed |
|---|---|---|
serveynpm | before 3.1.0 | 3.1.0 |
What each source reports
GitHub AdvisoriesNo score
Path Traversal in servey
Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
Upgrade to the latest version
- Record
GHSA-rv49-54qp-fw42- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVNo score
Path Traversal in servey
Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
Upgrade to the latest version
- Record
GHSA-rv49-54qp-fw42- Weakness
- CWE-22
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.