CVE-2016-10561

Bitty (a development web server) is vulnerable to a directory traversal flaw in version 0.2.10, exploitable via the URL path in GET requests. The issue is documented across multiple connected records (GHSA, OSV, NVD/NPM advisory) as directory traversal in the bitty package. No concrete exploit de...