Serve-lite vulnerabilities
We track 1 vulnerability in Serve-lite products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 26, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Serve-lite vulnerabilities
- 7.5 High severity
serve-lite: Improper Limitation of a Pathname to a Restricted Directory
All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().