Description
All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | serve-lite | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | serve-lite | <= 1.1.0 | — | GHSA-5qq4-m6c3-xxmf |