CVE-2023-26111
2 advisories.
npm/node-static CVE-2023-26111: high 7.5, EPSS 1.44%
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.11 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5g97-whc9-8g7j
- https://nvd.nist.gov/vuln/detail/CVE-2023-26111
- https://gist.github.com/lirantal/c80b28e7bee148dc287339cb483e42bc
- https://github.com/cloudhead/node-static
- https://github.com/cloudhead/node-static/blob/master/lib/node-static.js#23L160-L163
- https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-3149928
- https://security.snyk.io/vuln/SNYK-JS-NUBOSOFTWARENODESTATIC-3149927
CVE-2023-26111 · published · modified · JSON
npm/@nubosoftware/node-static CVE-2023-26111: high 7.5, EPSS 1.44%
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.7.11 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-5g97-whc9-8g7j#npm/@nubosoftware/node-static
- https://nvd.nist.gov/vuln/detail/CVE-2023-26111
- https://gist.github.com/lirantal/c80b28e7bee148dc287339cb483e42bc
- https://github.com/cloudhead/node-static
- https://github.com/cloudhead/node-static/blob/master/lib/node-static.js#23L160-L163
- https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-3149928
- https://security.snyk.io/vuln/SNYK-JS-NUBOSOFTWARENODESTATIC-3149927
CVE-2023-26111 · published · modified · JSON