brettz9/node-static

brettz9/node-static

Releases19
Frequency5 months 3 weeks
Last Release
Stars5
rfc 2616 compliant HTTP static-file server module, with built-in caching.

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
all versions, <= 0.7.117.5 HIGH

All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.