7.5 High

CVE-2023-26152 All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization…

Description

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.

Affected products and versions

Product	Affected versions	Fixed in
static-server	Versions not published

Do you use static-server?

Track this CVE Watch static-server Check my SBOMs

www.cveye.io/en/cve/CVE-2023-26152

Timeline

Published October 3, 2023
Last modified September 23, 2024

References

security.snyk.io security.snyk.io
gist.github.com gist.github.com
github.com github.com

Track this CVE