GHSA-7fxm-c848-89q8
static-dev-server vulnerable to path traversal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | static-dev-server | 1.0.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
A path traversal vulnerability affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accessed are relative to that of the root directory. There is currently no known workaround or fix for this issue.
References
External links from the advisory. They lead to third-party sites.