HIGH7.5
GHSA-vr98-27qj-3c8q
Directory traversal in rollup-plugin-server
Details
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in `readFile` operation inside the `readFileFromContentBase` function.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/rollup-plugin-server
Introduced in:
0No fixed version published yet for rollup-plugin-server (npm). Pin to a known-safe version or switch to an alternative.