HIGH7.5

GHSA-gpvj-q7fp-jcch

simplehttpserver allows directory traversal and file listing

Quick fix

GHSA-gpvj-q7fp-jcch — simplehttpserver: upgrade to the fixed version with the command below.

npm install simplehttpserver@0.2.1

Details

Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 0.2.1

Fixnpm install simplehttpserver@0.2.1