~ / search / GHSA-hj3m-v758-jwx5

GHSA-hj3m-v758-jwx5

Path Traversal in http-server-node

Source: GitHub Advisory Database (reviewed) High CVE-2021-23797

Packages

EcosystemPackageAffectedFixed in
npm http-server-node <= 1.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of package http-server-node are vulnerable to Directory Traversal via use of `--path-as-is`.

References

External links from the advisory. They lead to third-party sites.