Skip to content
OpenAdvisories

Package · Debian

node-serve-static

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.0
    CVE-2024-43800

    serve-static affected by template injection that can lead to XSS

    serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.

    expressjs serve-static serve-static node-serve-static Debian Ubuntu npm
  • Low 3.1
    CVE-2015-1164

    Open Redirect in serve-static

    Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_IN…

    serve-static node-serve-static Debian npm