HIGH7.5
GHSA-34gh-3cwv-wvp2
Directory traversal in rollup-plugin-server
Details
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/rollup-plugin-server
Introduced in:
0No fixed version published yet for rollup-plugin-server (npm). Pin to a known-safe version or switch to an alternative.