Описание
Path Traversal in superstatic
Affected of superstatic are vulnerable to path traversal when used on Windows.
Additionally, it is vulnerable to path traversal on other platforms combined with certain Node.js versions which erroneously normalize \\ to / in paths on all platforms (a known example being Node.js v9.9.0).
Recommendation
Update to version 5.0.2 or later.
Пакеты
Наименование
superstatic
npm
Затронутые версииВерсия исправления
< 5.0.2
5.0.2
Дефекты
CWE-177
Дефекты
CWE-177