~ / search / GHSA-vcxh-qvgr-9fw9

GHSA-vcxh-qvgr-9fw9

m.static Directory Traversal vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-26126

Packages

EcosystemPackageAffectedFixed in
npm m.static <= 2.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the `requestFile` function.

References

External links from the advisory. They lead to third-party sites.