{"id":"GHSA-q324-q795-2q5p","aliases":[],"status":"published","title":"Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name","description":"### Impact\n`preview-docs` command allows path traversal if current working dir contains files with question mark `?` in name and attacker knows the name.\n\n### Patches\nIt was patched starting from 1.0.0-beta.59\n\n### Workarounds\nDo not run openapi-cli preview-docs command in the folder which contains files with question mark `?` in name.\n\n### References\nhttps://github.com/Redocly/openapi-cli/pull/347\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [@redocly/openapi-cli](https://github.com/Redocly/openapi-cli)\n* Email us at [security@redocly.com](mailto:security@redocly.com)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-10-12T16:05:11Z","modified":"2023-01-09T05:05:22Z","fixes":[{"ecosystem":"npm","package":"@redocly/openapi-cli","fixed_in":["1.0.0-beta.59"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"@redocly/openapi-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.0.0-beta.58"},{"fixed":"1.0.0-beta.59"}]}]},{"source":"osv","ecosystem":"npm","package":"@redocly/openapi-cli","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.0.0-beta.59"}]}]}],"references":[{"url":"https://github.com/Redocly/openapi-cli/security/advisories/GHSA-q324-q795-2q5p","tags":["web"]},{"url":"https://github.com/Redocly/openapi-cli/pull/347","tags":["web"]},{"url":"https://github.com/advisories/GHSA-q324-q795-2q5p"},{"url":"https://github.com/Redocly/openapi-cli","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-q324-q795-2q5p","title":"Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name","description":"### Impact\n`preview-docs` command allows path traversal if current working dir contains files with question mark `?` in name and attacker knows the name.\n\n### Patches\nIt was patched starting from 1.0.0-beta.59\n\n### Workarounds\nDo not run openapi-cli preview-docs command in the folder which contains files with question mark `?` in name.\n\n### References\nhttps://github.com/Redocly/openapi-cli/pull/347\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [@redocly/openapi-cli](https://github.com/Redocly/openapi-cli)\n* Email us at [security@redocly.com](mailto:security@redocly.com)\n","status":"published","published":"2021-10-12T16:05:11Z","modified":"2023-01-09T05:05:22Z","updated_at":"2026-11-02T14:36:11.367194Z"}],"osv":[{"id":"GHSA-q324-q795-2q5p","title":"Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name","description":"### Impact\n`preview-docs` command allows path traversal if current working dir contains files with question mark `?` in name and attacker knows the name.\n\n### Patches\nIt was patched starting from 1.0.0-beta.59\n\n### Workarounds\nDo not run openapi-cli preview-docs command in the folder which contains files with question mark `?` in name.\n\n### References\nhttps://github.com/Redocly/openapi-cli/pull/347\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [@redocly/openapi-cli](https://github.com/Redocly/openapi-cli)\n* Email us at [security@redocly.com](mailto:security@redocly.com)\n","status":"published","published":"2021-10-12T16:05:11Z","modified":"2021-10-11T18:40:44Z","updated_at":"2026-11-02T15:46:54.055966Z"}]}}