Threats tagged 'ghsa-53hc-h6q3-c725'

A path traversal vulnerability exists in Mereithhh VanBlog up to version 0.54.0 in the fs.readFileSync function within local.provider.ts of the Custom Page Handler component. This vulnerability allows remote attackers with high privileges to manipulate the file path argument, potentially leading to unauthorized file access. A public exploit has been disclosed. Upgrading to version test-20261013 resolves the issue.