PatchTheCVElocalhost-now project vulnerabilities
Recent CVEs affecting localhost-now project products. 2 tracked.
localhost-now project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2019-03-21. Highest priority: CVE-2019-5416 (score 57/100).
- CVE-2019-5416 HIGH 7.5 DOWNGRADE A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content
- CVE-2018-3729 HIGH 7.5 DOWNGRADE localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which
FAQ
How do I fix localhost-now project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is localhost-now project being exploited right now?
None of the tracked localhost-now project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which localhost-now project CVE should I patch first?
CVE-2019-5416 currently ranks highest (57/100): A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content.