rollup-plugin-serve path traversal vulnerability

rollup-plugin-serve is a module bundler package for JavaScript. A security vulnerability exists in the readFile operation of the 'readFileFromContentBase' function in rollup-plugin-server, which stems from the program's failure to clean up paths. No details of the vulnerability are available at...

GHSA-VR98-27QJ-3C8Q Directory traversal in rollup-plugin-server

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

rollup-plugin-dev-server path traversal vulnerability

rollup-plugin-dev-server is a plugin summary package. A path traversal vulnerability exists in the readFile operation of the 'readFileFromContentBase' function in rollup-plugin-dev-server all versions, which stems from the program's failure to clean up paths, and can be exploited by an attacker t...

CVE-2020-7686

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

CVE-2020-7686

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

CVE-2020-7683

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

CVE-2020-7683

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

CVE-2020-7683: Improper Limitation of a Pathname to a Restricted Directory

This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...

CVE-2020-7686: Improper Limitation of a Pathname to a Restricted Directory

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function...

PT-2020-19706

Name of the Vulnerable Software and Affected Versions rollup-plugin-server affected versions not specified Description The issue is related to a lack of path sanitization in the readFile operation performed inside the readFileFromContentBase function. This could potentially lead to security issue...

PT-2020-19709

Name of the Vulnerable Software and Affected Versions rollup-plugin-dev-server versions all Description The issue is related to the lack of path sanitization in the readFile operation inside the readFileFromContentBase function. This could potentially lead to security issues, as it may allow...

Directory Traversal

Overview rollup-plugin-dev-server is a server for serving rolled up bundles like webpack-dev-server. Affected versions of this package are vulnerable to Directory Traversal. There is no path sanitization in readFile operation inside the readFileFromContentBase function. PoC by JHU System Security...