CVE-2017-18355

Name of the Vulnerable Software and Affected Versions: Rendertron version 1.0.0

Description: The issue allows remote attackers to read absolute paths on the server by examining the where attribute of package.json files in the node modules directory.

Recommendations: For Rendertron version 1.0.0, consider restricting access to the node modules directory to minimize the risk of exploitation. As a temporary workaround, restrict access to the package.json files until a patch is available.