CVE-2024-56198: Cabraviva Path-Sanitizer

Critical severity, CVSS 9.3. EPSS: 0.7% chance of exploitation in the next 30 days.

path-sanitizer is a simple lightweight npm package for sanitizing paths to prevent Path Traversal. Prior to 3.1.0, the filters can be bypassed using .=%5c which results in a path traversal. This vulnerability is fixed in 3.1.0.

Affected products

• Cabraviva Path-Sanitizer: before 3.1.0 (fixed in 3.1.0)

Published 2024-12-31. Last modified 2026-06-17.