~ / search / GHSA-88v8-v46g-6c9w

GHSA-88v8-v46g-6c9w

Servst vulnerable to Path Traversal

Source: GitHub Advisory Database (reviewed) High CVE-2022-25936

Packages

EcosystemPackageAffectedFixed in
npm servst < 2.0.3 2.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of its filePath variable.

References

External links from the advisory. They lead to third-party sites.