Skip to content
OpenAdvisories

Product · denoland

std

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2024-52793

    XSS vulnerability in serveDir API of @std/http/file-server on POSIX systems

    The Deno Standard Library provides APIs for Deno and the Web. Prior to version 1.0.11, `http/file-server`'s `serveDir` with `showDirListing: true` option is vulnerable to cross-site scripting when the attacker is a user who can control file names in the sourc…

    denoland std