wakaru vulnerabilities
1 known vulnerability in wakaru from Pionxzh. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.1average CVSS score
Latest first
- 7.1 High severity
wakaru: Improper Limitation of a Pathname to a Restricted Directory
wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ....