@njt-tools-open/lang-manage (>=0.0.0, <=2.0.6), @seal5545/cnpmjs.org (3.0.0-rc.43) +49 more potentially affected by unknown CVE via koa-static-cache (>=1.0.4, <=4.0.0)

koa-static-cache NPM version =1.0.4, =0.0.0, =0.0.9-beta.1, =0.1.2-alpha.1, =0.0.3, =0.0.1, =1.0.10, =0.0.0-alpha.0, =0.3.0, =0.0.8, =1.0.2, =0.2.0, =0.2.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0267...

WS-2017-0267

Affected versions before 4.1.1, and 5.0.0 before 5.1.1 of the koa-static-cache package are vulnerable to Directory Traversal...