Description
The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackerOne | inert node module | <1.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | inert | < 1.1.1 | 1.1.1 | GHSA-g4xp-36c3-f7mr |