Skip to content
OpenAdvisories

Package · npm

@oakserver/oak

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2025-55152

    oak: ReDoS in x-forwarded-proto and x-forwarded-for headers

    oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded…

    oakserver oak @oakserver/oak npm
  • High 7.7
    CVE-2024-49770

    oak's path traversal allows transfer of hidden files within the served root directory

    `oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. By default `oak` does not allow transferring of hidden files with `Context.send` API. However, prior to version 17.1.3, this can be…

    oakserver oak @oakserver/oak npm