Lucene search

K
osvGoogleOSV:GHSA-J27J-4W6M-8FC4
HistoryMar 31, 2020 - 5:02 p.m.

Path Traversal in statics-server

2020-03-3117:02:12
Google
osv.dev
8

EPSS

0.004

Percentile

75.2%

All versions of statics-server are vulnerable to Path Traversal. The package fails to limit access to files outside of the served folder through symlinks.

Recommendation

No fix is currently available. Do not use statics-server in production or consider using an alternative module until a fix is made available.

EPSS

0.004

Percentile

75.2%

Related for OSV:GHSA-J27J-4W6M-8FC4