VYPR

npm package

coursevault-preview

pkg:npm/coursevault-preview

Vulnerabilities (1)

  • CVE-2026-35613MedApr 7, 2026
    affected < 0.1.1fixed 0.1.1

    coursevault-preview is a utility for previewing course material files from a configured directory. coursevault-preview versions prior to 0.1.1 contain a path traversal vulnerability in the resolveSafe utility. The boundary check used String.prototype.startsWith(baseDir) on a norm