Description
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | @nubosoftware/node-static | — | — |
| — | node-static | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @nubosoftware/node-static | <= 0.7.11 | — | GHSA-5g97-whc9-8g7j |
| npm | node-static | <= 0.7.11 | — | GHSA-5g97-whc9-8g7j |