| Package | Affected versions | Patched versions |
|---|---|---|
| serve-here.js | ≤ 1.1.3 | |
| serve-here.js | < 1.2.0 | 1.2.0 |
Versions of serve-here.js prior to 1.2.0 are vulnerable to path traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free