npm/serve: high

Byass due to validation before canonicalization in serve

Action: Upgrade serve to 6.5.2 or later.

npm i serve@6.5.2

Affected

Fixed versions

Sources

• osv: GHSA-wm7q-rxch-43mx
• https://hackerone.com/reports/308721
• https://www.npmjs.com/advisories/594

published 2020-09-01T19:38:33Z · modified 2020-08-31T18:29:10Z · JSON