brettz9/node-static
Releases19
Frequency5 months 3 weeks
Last Release
Stars5
rfc 2616 compliant HTTP static-file server module, with built-in caching.
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| all versions, <= 0.7.11 | 7.5 HIGH | — | ||
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function. | ||||