senchalabs/connect

Releases230

Frequency2 weeks 6 hours

Last Release about 7 years ago

Stars9.89K

Connect is an extensible HTTP server framework for node using "plugins" known as middleware.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-3717 ↗	Jun 7, 2018Thursday, 7 June 2018, 02:29	5.4 MEDIUM	3.5 LOW
connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.js middleware.