GHSA-wcwm-c3mr-pxcr
easy-static-server vulnerable to Directory Traversal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | easy-static-server | <= 0.1.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
All versions of package easy-static-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the `req.url` user input that is passed to the server code.
References
External links from the advisory. They lead to third-party sites.