Security Links
A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to save files anywhere in the filesystem, overwrite existing text files, read `.txt` files, and delete files. The vulnerability is exploited through the `setFileContent`, `getParsedFile`, and `mdelete` methods, which do not properly sanitize user input.

Auth0 Blog

Everything you need to know about Identity Infrastructure, Access Management, SSO and JWT Authentication.

Highlights

  • A blogs that mainly focuses on authentication.
Visit Website
Listed: