GHSA-v7cp-5326-54fh
Path Traversal in bruteser
Versions of bruteser prior to 0.1.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.1.0 or later.
What each source reports
GitHub AdvisoriesNo score
Path Traversal in bruteser
Versions of bruteser prior to 0.1.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.1.0 or later.
- Record
GHSA-v7cp-5326-54fh- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVNo score
Path Traversal in bruteser
Versions of bruteser prior to 0.1.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Recommendation
Upgrade to version 0.1.0 or later.
- Record
GHSA-v7cp-5326-54fh- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
brutesernpm | before 0.1.0 | 0.1.0 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-v7cp-5326-54fh is a vulnerability with no CVSS score yet in bruteser, published September 3, 2020. No source lists public exploit code. Fixed in bruteser 0.1.0.