{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.4.1"}],"component":"startserver","cve_ids":["CVE-2021-23430"],"ecosystem":"npm","epss":0.01779,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-hqv3-qq72-78cv","id":"tcs_01M5KFVWPE1AM1W0FX7P9K5YCR","modified_at":"2026-03-13T21:56:24.581512Z","published_at":"2021-09-02T17:09:40Z","references":["https://osv.dev/vulnerability/GHSA-hqv3-qq72-78cv","https://nvd.nist.gov/vuln/detail/CVE-2021-23430","https://github.com/xudafeng/startserver","https://github.com/xudafeng/startserver/blob/bef0c4e4d21da42a40ce87cf25fd54ac8d8cb2d8/lib/index.js%23L71","https://snyk.io/vuln/SNYK-JS-STARTSERVER-1296388"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-hqv3-qq72-78cv","url":"https://osv.dev/vulnerability/GHSA-hqv3-qq72-78cv"}],"summary":"Directory Traversal in startserver"}