CVE-2024-29650: Thi-NG Paths

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

An issue in @thi.ng/paths v.5.1.62 and before allows a remote attacker to execute arbitrary code via the mutIn and mutInManyUnsafe components.

Affected products

• Thi-NG Paths: before 5.1.63 (fixed in 5.1.63)

Published 2024-03-25. Last modified 2026-06-17.