CVE-2022-25848
1 advisory.
npm/static-dev-server CVE-2022-25848: high 7.5
static-dev-server vulnerable to path traversal
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-7fxm-c848-89q8
- https://nvd.nist.gov/vuln/detail/CVE-2022-25848
- https://gist.github.com/lirantal/5550bcd0bdf92c1b56fbb20e141fe5bd
- https://github.com/etoah/static-dev-server
- https://security.snyk.io/vuln/SNYK-JS-STATICDEVSERVER-3149917
CVE-2022-25848 · published · modified · JSON