Description
All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | static-server | — | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | static-server | <= 2.2.1 | — | GHSA-v834-rhv4-65m3 |