Skip to content

Vendor

geddyjs vulnerabilities

1 published CVE affecting geddyjs, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of geddyjs alerts

Products

Latest geddyjs CVEs

Newest publication first

  1. CVE-2015-5688 Directory Traversal in geddy

    Published
    MediumCVSS 5.0 EPSS 9.4%

    Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.