Skip to content
OpenAdvisories

Vendor

oakserver

2 known vulnerabilities.

Products

oak 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2024-49770

    oak's path traversal allows transfer of hidden files within the served root directory

    `oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. By default `oak` does not allow transferring of hidden files with `Context.send` API. However, prior to version 17.1.3, this can be…

    oakserver oak @oakserver/oak npm