npm/@hono/node-server: medium 5.9
Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)
Action: Upgrade @hono/node-server to 1.19.15 or later.
npm i @hono/node-server@2.0.5npm i @hono/node-server@1.19.15Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.5 | - |
| 0 | 1.19.15 | - |
Fixed versions
| 2.0.5 | 1.19.15 |
Sources
- osv: GHSA-frvp-7c67-39w9
- https://github.com/honojs/node-server/security/advisories/GHSA-frvp-7c67-39w9
- https://github.com/honojs/node-server/commit/cd076e117cfe4cb8d31f9eb11d2e8f38a6cb8faf
- https://github.com/honojs/node-server
- https://github.com/honojs/node-server/releases/tag/v2.0.5
published · modified · JSON