serve-lite vulnerabilities
1 known vulnerability in serve-lite from Serve-lite. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest first
- 7.5 High severity
serve-lite: Improper Limitation of a Pathname to a Restricted Directory
All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().