7.5 High

CVE-2023-26126 All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the…

Description

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the path being requested via the requestFile function.

Affected products and versions

Product	Affected versions	Fixed in
m.static	Versions not published

Do you use m.static?

Track this CVE Watch m.static Check my SBOMs

www.cveye.io/en/cve/CVE-2023-26126

Timeline

Published May 10, 2023
Last modified January 27, 2025

References

security.snyk.io security.snyk.io
gist.github.com gist.github.com

Track this CVE