Skip to content
OpenAdvisories

Package · npm

serve-here

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-g8m7-qhv7-9h5x

    Path Traversal in serve-here.js

    Versions of `serve-here.js` prior to 1.2.0 are vulnerable to Path Traversal. The package fails to sanitize URLs, allowing attackers to access server files outside of the served folder using relative paths. ## Recommendation Upgrade to version 1.2.0 or later.

    serve-here npm