CVE-2018-3712

npm/serve CVE-2018-3712: medium 6.5, EPSS 1.79%

Directory Traversal in serve

Action: Upgrade serve to 6.4.9 or later.

npm i serve@6.4.9

Affected

Fixed versions

Sources

• osv: GHSA-q2qh-cgc2-qhr3
• https://nvd.nist.gov/vuln/detail/CVE-2018-3712
• https://github.com/zeit/serve/pull/316
• https://github.com/vercel/serve/commit/6adad6881c61991da61ebc857857c53409544575
• https://hackerone.com/reports/307666
• https://github.com/vercel/serve

CVE-2018-3712 · published 2018-07-27T17:07:50Z · modified 2023-11-08T04:00:16.627483Z · JSON