Skip to content
OpenAdvisories

Package · npm

statics-server

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium —
    CVE-2019-15596

    Path Traversal in statics-server

    A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory.

    statics-server npm
  • Medium —
    GHSA-74cp-qw7f-7hpw

    Path Traversal in statics-server

    All versions of `statics-server` are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. ## Recommendation No fix is currently available. Consider using an alternative module until a…

    statics-server npm
  • Medium 6.1
    CVE-2018-3771

    statics-server Cross-site Scripting vulnerability

    An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.

    HackerOne statics-server statics-server npm