Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-26111
Description
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.
NPM
cloudhead/node-static
GitHubrfc 2616 compliant HTTP static-file server module, with built-in caching.
GitHubrfc 2616 compliant HTTP static-file server module, with built-in caching.all versions, <= 0.7.11NVD