npm/serve: high
Cross-Site Scripting in serve
Action: Upgrade serve to 10.0.2 or later.
npm i serve@10.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.0.2 | - |
Fixed versions
| 10.0.2 |
Sources
- osv: GHSA-xw79-hhv6-578c
- https://github.com/zeit/serve-handler/commit/65b4d4183a31a8076c78c40118acb0ca1b64f620
- https://hackerone.com/reports/358641
- https://hackerone.com/reports/398285
- https://github.com/zeit/serve-handler
- https://www.npmjs.com/advisories/971
published · modified · JSON