MEDIUM5.3
GHSA-5rc4-8qqh-vq7f
vercel/serve allows access to restricted files if filename is URL encoded.
Quick fix
GHSA-5rc4-8qqh-vq7f — serve: upgrade to the fixed version with the command below.
npm install serve@6.5.2Details
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
Are you affected?
Enter the version of the package you're using.