Description
This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | rollup-plugin-dev-server | < unspecified | unspecified |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | rollup-plugin-server | <= 0.7.0 | — | GHSA-vr98-27qj-3c8q |