Skip to content
OpenAdvisories
High · 7.5 CVE-2022-25936 EUVD-2023-0401GHSA-88v8-v46g-6c9w

Servst vulnerable to Path Traversal

Published Jan 30, 2023 · Updated Mar 27, 2025 · Assigned by snyk

Description

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of the filePath variable.

Affected products

VendorProductAffectedFixed
— servst < 2.0.3 2.0.3

Affected packages

EcosystemPackageAffectedFixedRecord
npm servst < 2.0.3 2.0.3 GHSA-88v8-v46g-6c9w

References