npm/simplehttpserver CVE-2018-16478: medium 5.3, EPSS 1.29%
Path Traversal in simplehttpserver
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vwr2-wj63-86gr
- https://nvd.nist.gov/vuln/detail/CVE-2018-16478
- https://hackerone.com/reports/403703
- https://github.com/advisories/GHSA-vwr2-wj63-86gr
- https://github.com/nodejs/security-wg/blob/master/vuln/npm/484.json
- https://github.com/tikonen/blog/tree/master/simplehttpserver
- https://www.npmjs.com/advisories/744
CVE-2018-16478 · published · modified · JSON