CVE-2018-3732: Resolve-Path Project Resolve-Path

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special characters, which allows a malicious user to read content of any file with known path.

Affected products

• Resolve-Path Project Resolve-Path: before 1.4.0 (fixed in 1.4.0)

Published 2018-06-07. Last modified 2026-06-17.