GHSA-pppv-ch8p-rp2w
lite-dev-server vulnerable to Directory Traversal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | lite-dev-server | <= 3.2.7 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the `req.url` user input that is passed to the server code.
References
External links from the advisory. They lead to third-party sites.