7.5
Élevée
CVE-2023-26111 All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to…
Description
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| @nubosoftware/node-static | Versions non publiées | |
| node-static | Versions non publiées |