Detect path traversal in file operations
File reads and writes that join a base directory with user input are traversal bugs unless the resolved path is re-checked.
Tag: path-traversal
Review Node child_process and dynamic requires
exec with a string, dynamic require, and vm without a sandbox are the Node sinks that turn input into code.