CVE Details
Basic Information
| Title | IPX is Vulnerable to Path Traversal via Prefix Matching Bypass |
|---|---|
| Type | cve |
| Published | 2025-08-05T00:10:26.442Z |
| Modified | 2025-08-05T00:10:26.442Z |
Product Information
| Vendor | unjs |
|---|---|
| Product | ipx |
| Version | < 1.3.2 |
CVSS Information
| Base Score | 6.9 (MEDIUM) |
|---|---|
| Attack Vector | CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:L/SA:N |
Affected Products
- unjs ipx < 1.3.2
- unjs ipx >= 2.0.0-0, < 2.1.1
- unjs ipx >= 3.0.0, < 3.1.1
Additional Information
| CWE List | CWE-22 |
|---|---|
| Source | GitHub_M |
Description
IPX is an image optimizer powered by sharp and svgo. In versions 1.3.1 and below, 2.0.0-0 through 2.1.0, and 3.0.0 through 3.1.0, the approach used to check whether a path is within allowed directories is vulnerable to path prefix bypass when the allowed directories do not end with a path separator. This occurs because the check relies on a raw string prefix comparison. This is fixed in versions 1.3.2, 2.1.1 and 3.1.1.