Description
Cross-site scripting (XSS) vulnerability in min-http-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| min-http-server | min-http-server | Not Fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | min-http-server | <= 1.0.6 | — | GHSA-j657-59rv-qwm6 |