HIGHnpm
GHSA-48gc-5j93-5cfqPath Traversal in serve
Modified: 8/31/2020
package
npm/serve
pkg:npm/serve
MEDIUM5.3npm
GHSA-5rc4-8qqh-vq7f· CVE-2018-3718vercel/serve allows access to restricted files if filename is URL encoded.
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-686g-3xr3-x4x6· CVE-2018-3809Information Exposure on Case Insensitive File Systems in serve
Modified: 11/8/2023
MEDIUMnpm
GHSA-cpgr-wmr9-qxv4Cross-Site Scripting in serve
Modified: 8/31/2020
MEDIUM6.5npm
GHSA-q2qh-cgc2-qhr3· CVE-2018-3712Directory Traversal in serve
Modified: 11/8/2023
HIGH7.5npm
GHSA-v588-qcp3-jv46· CVE-2019-5415Path Traversal in serve
Modified: 7/15/2025
HIGHnpm
GHSA-wm7q-rxch-43mxByass due to validation before canonicalization in serve
Modified: 8/31/2020
HIGH7.5npm
GHSA-xg75-3277-gvvj· CVE-2019-5417Directory Traversal in serve
Modified: 11/8/2023
HIGHnpm
GHSA-xw79-hhv6-578cCross-Site Scripting in serve
Modified: 9/28/2021