LOW3.1npm
GHSA-c3x7-gjmx-r2ff· CVE-2015-1164Open Redirect in serve-static
Modified: 11/8/2023
package
npm/serve-static
pkg:npm/serve-static
MEDIUM5.0npm
GHSA-cm22-4g7w-348p· CVE-2024-43800serve-static vulnerable to template injection that can lead to XSS
Modified: 9/10/2026