60 matches found
CVE-2026-90494
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
CVE-2026-90494 restify node-restify static.js serveStatic path traversal
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
EUVD-2026-76941
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
CVE-2026-90494
A path traversal vulnerability exists in the serveStatic function of the file /lib/plugins/static.js in restify node-restify up to 12.0.0 . The flaw can be triggered remotely without authentication or user interaction, allowing an attacker to access files outside the intended directory with a low...
CVE-2026-90494
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
CVE-2026-90494 restify node-restify static.js serveStatic path traversal
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
CVE-2026-90494: Improper Limitation of a Pathname to a Restricted Directory
A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any w...
PT-2026-90784
Name of the Vulnerable Software and Affected Versions restify node-restify versions prior to 12.0.1 Description A remote path traversal flaw exists in the serveStatic function within the /lib/plugins/static.js library. Path traversal is a technique that allows an attacker to access files and...
3c (>=0.0.1-alpha, <=1.0.0), @loklaan/npm-hook-slack (>=1.0.1, <=1.1.0-testing.2) +311 more potentially affected by unknown CVE via restify (>=2.1.1, <=4.0.4)
restify NPM version =2.1.1, =0.0.1-alpha, =1.0.1, =0.1.2, =0.2.5, =0.1.9, =0.0.1, =0.2.20, =0.3.7, =2.0.0, =1.0.1, =0.0.0, =0.0.1, =0.0.1, =0.5.1 and more Source cves: unknown CVE Source advisory: MEND:WS-2017-0186...
WS-2019-0213
restify-swagger-jsdoc versions before 3.2.1 has a path traversal vulnerability when failing to properly sanitize URLs, which may allow attackers to access server files outside the swagger-ui folder by using relative paths...
peanut-restify (>=1.1.0, <=1.1.66) potentially affected by unknown CVE via restify-swagger-jsdoc (>=1.1.2, <=1.2.1)
restify-swagger-jsdoc NPM version =1.1.2, =1.1.0, =1.1.66 Source cves: unknown CVE Source advisory: MEND:WS-2019-0213...
EUVD-2021-0864
Malware in sbrugna...
EUVD-2018-0577
Malware in sbrugna...
EUVD-2018-0773
Malware in sbrugna...
CVE-2020-27543
The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...
MAL-2024-8762 Malicious code in falcor-restify-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65bd1e0827a70f5ef5dcd48080f47b4954d22f07cdba313bf94bb7508d4f1f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in falcor-restify-demo
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in falcor-restify-demo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65bd1e0827a70f5ef5dcd48080f47b4954d22f07cdba313bf94bb7508d4f1f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Denial of Service (DoS) in restify-paginate
The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...
GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate
The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...