CVE-2023-26126
1 advisory.
npm/m.static CVE-2023-26126: high 7.5, EPSS 0.99%
m.static Directory Traversal vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vcxh-qvgr-9fw9
- https://nvd.nist.gov/vuln/detail/CVE-2023-26126
- https://gist.github.com/lirantal/dcb32c11ce87f5aafd2282b90b4dc998
- https://github.com/ivoputzer/m.static
- https://github.com/ivoputzer/m.static/blob/master/index.js#L19
- https://security.snyk.io/vuln/SNYK-JS-MSTATIC-3244915
CVE-2023-26126 · published · modified · JSON