simonsmith vulnerabilities

Products

• @simonsmith/cypress-image-snapshot 1
• cypress image snapshot 1

Latest simonsmith CVEs

Newest publication first

1. CVE-2023-38695 cypress-image-snapshot vulnerable to insecure snapshot file names

   Published 2023-08-04

   Medium·CVSS 6.5

   cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has be...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.