description: xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.
problem types: Path Traversal (CWE-22)
affected:
{
product: xtalk node module
vendor: HackerOne
versions:
status: affected, version: >=0.0.2
}