Threats affecting pkg:npm/webpro-nl/knip

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.3	CVE-2026-120325Webpro-nl Knip · Path Traversal Medium5.32026-11-02CVE Database V5CVE-2026-120325 CVE-2026-120325 is a path traversal vulnerability in Webpro-nl Knip versions up to 6.44.0. It affects the writeFile function in the Workspace Handler component, allowing remote attackers to manipulate file paths via the workspaces argument. Public exploit code is available, but no vendor response or patch has been issued. The vulnerability has a medium severity rating with a CVSS 4.0 score of 5.3. Vulnerability	CVE Database V5	2026-11-02

Page 1 of 1