CVE-2024-43800
1 advisory.
npm/serve-static CVE-2024-43800: medium 5
serve-static vulnerable to template injection that can lead to XSS
Action: Upgrade serve-static to 1.16.0 or later.
npm i serve-static@1.16.0npm i serve-static@2.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.16.0 | - |
| 2.0.0 | 2.1.0 | - |
Fixed versions
| 1.16.0 | 2.1.0 |
Sources
- osv: GHSA-cm22-4g7w-348p
- https://github.com/expressjs/serve-static/security/advisories/GHSA-cm22-4g7w-348p
- https://nvd.nist.gov/vuln/detail/CVE-2024-43800
- https://github.com/expressjs/serve-static/commit/0c11fad159898cdc69fd9ab63269b72468ecaf6b
- https://github.com/expressjs/serve-static/commit/ce730896fddce1588111d9ef6fdf20896de5c6fa
- https://github.com/expressjs/serve-static
CVE-2024-43800 · published · modified · JSON