A simple lightweight npm package for sanitizing paths to prevent Path Traversal

Daytona Workspace wrapper for BonkLM. Proxies process.* + fs.* with code-injection + path-traversal validation. EXPERIMENTAL (Story 3.5).

E2B Sandbox wrapper for BonkLM. Proxies commands.run / runCode / files.* with code-injection + path-traversal validation. EXPERIMENTAL (Story 3.5).

Path traversal as Effect primitives: ascend a directory chain to the first matching candidate, or descend a tree expanding a glob against the filesystem.

Object path traversal with concatenation

Clean dirty archive and upload paths: Windows backslash zip entries, macOS junk files, directory markers, path traversal, and URL-unsafe filenames.

ESLint plugin for Node.js security — detects command injection, path traversal, SSRF, zip slip, and weak crypto (MD5/SHA-1, ECB, static IV) in fs, child_process, vm, and crypto.

Path-traversal validation and path-component sanitization with a Result-typed API

Deep property manipulation utilities with robust cloning, path traversal, and property access for JavaScript/TypeScript objects.

A set of [zod](https://zod.dev/)-based validators providing sensible defaults to prevent common security vulnerabilities: path traversal, open redirects, XSS, and SSRF. Each validator is its own subpath export, so you only pull in what you use.

Security scanner for MCP servers. Detects SSRF, path traversal, injection vulnerabilities. Snyk for MCP.

A hardened custom protocol for serving an Electron renderer bundle, with path-traversal protection, CSP defaults, and SPA fallback.

Express middleware that detects malicious requests, like XSS or Path Traversal

🚶 Does this string contain path traversal?

walk paths fast and efficiently

A production-grade, security-first TypeScript library for Node.js. Defends against XSS, Prototype Pollution, Path Traversal, SQL/NoSQL Injection, and more. Includes adaptive rate limiting, WebAuthn/Passkeys, AES-256-GCM sessions, and post-quantum cryptogr

TypeScript-powered secure path resolution with browser support - prevents path traversal attacks

Middleware RASP de deteccion de amenazas (SQLi, XSS, Path Traversal, Command Injection) para Node.js/Express, con inferencia ONNX (Random Forest + Isolation Forest)

Hardened filesystem access for AI agents — jailed to an allowed root, read-only by default, path-traversal + symlink-escape protected. MCP server.

Simple WAF Web App Firewall, middleware for Node.js — blocks SQLi, XSS, path traversal, command injection & bots, with a waf-style browser check, framework-agnostic