Description
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | rollup-plugin-server | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | rollup-plugin-server | <= 0.7.0 | — | GHSA-34gh-3cwv-wvp2 |