vercel/serve

Releases161

Frequency3 weeks 1 day

Last Release4 months ago

Stars9.88K

Static file serving and directory listing

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2018-3712NVD↗	< 6.4.9	Jun 7, 2018Thursday, 7 June 2018, 02:29	—	4 MEDIUM
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.