HIGH7.5
GHSA-5qq4-m6c3-xxmf
Directory Traversal vulnerability in serve-lite
Details
All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/serve-lite
Introduced in:
0No fixed version published yet for serve-lite (npm). Pin to a known-safe version or switch to an alternative.