Описание
Path Traversal in serve
Versions of serve prior to 10.1.2 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through relative paths, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 10.1.2 or later.
Пакеты
Наименование
serve
npm
Затронутые версииВерсия исправления
< 10.1.2
10.1.2
Дефекты
CWE-22
Дефекты
CWE-22