npm/serve-here: high
Path Traversal in serve-here.js
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-g8m7-qhv7-9h5x
- https://github.com/vivaxy/here/pull/17
- https://github.com/vivaxy/here/commit/298dbab41344dfb7f95f66b1fa7b5cfb436bd4a2
- https://hackerone.com/reports/296254
- https://hackerone.com/reports/569966
- https://www.npmjs.com/advisories/554
published · modified · JSON