Description
Cross-site scripting (XSS) vulnerability in http-file-server (all versions) allows an attacker with access to the server file system to execute arbitrary JavaScript code in victim's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| http-file-server | http-file-server | Not Fixed | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | http-file-server | <= 0.2.6 | — | GHSA-7j93-2h6r-hm49 |