High severity7.5NVD Advisory· Published Oct 23, 2017· Updated Jun 17, 2026
CVE-2014-3744
CVE-2014-3744
Description
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
stnpm | < 0.2.5 | 0.2.5 |
Affected products
2Patches
Vulnerability mechanics
References
7- www.securityfocus.com/bid/67389nvdThird Party AdvisoryVDB EntryWEB
- github.com/advisories/GHSA-69rr-wvh9-6c4qghsaADVISORY
- nodesecurity.io/advisories/st_directory_traversalnvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2014-3744ghsaADVISORY
- www.openwall.com/lists/oss-security/2014/05/13/1nvdMailing ListWEB
- www.openwall.com/lists/oss-security/2014/05/15/2nvdMailing ListWEB
- www.npmjs.com/advisories/36ghsaWEB
News mentions
0No linked articles in our index yet.