Lucene search

K
nodejsAnonymousNODEJS:1714
HistoryMay 18, 2021 - 1:57 a.m.

Path traversal in rollup-plugin-serve

2021-05-1801:57:43
Anonymous
www.npmjs.com
49

0.003 Low

EPSS

Percentile

68.4%

Overview

Path traversal in rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation.

Recommendation

Upgrade to version 1.0.2 or later

References

CPENameOperatorVersion
rollup-plugin-servelt1.0.2

0.003 Low

EPSS

Percentile

68.4%