7.5
High
CVE-2023-26111 All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to…
Description
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| @nubosoftware/node-static | Versions not published | |
| node-static | Versions not published |