Static-server vulnerabilities
We track 1 vulnerability in Static-server products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Static-server vulnerabilities
- 7.5 High severity
static-server: Improper Limitation of a Pathname to a Restricted Directory
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.