PatchTheCVElocalhost-now vulnerabilities and fixes
Recent CVEs affecting localhost-now, with upgrade or downgrade steps. 2 tracked.
Also searched as: localhost now.
localhost-now has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2019-5416 (score 57/100).
- CVE-2019-5416 HIGH 7.5 DOWNGRADE A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content
- CVE-2018-3729 HIGH 7.5 DOWNGRADE localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which
FAQ
How do I fix localhost-now vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is localhost-now being exploited right now?
None of the tracked localhost-now CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which localhost-now CVE should I patch first?
CVE-2019-5416 currently ranks highest (57/100): A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content.