Homepage
About Snyk

serve-here@2.7.4 vulnerabilities

local static server

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the serve-here package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Directory Traversal

Note The serve-here package has been deprecated by the author and replaced by @vivaxy/here package.

serve-here was a Local static server which has been renamed to @vivaxy/here.

Affected versions of this package are vulnerable to Directory Traversal. A crafted request can be used to traverse the directory structure of a host using the serve-here package, and request arbitrary files outside of the specified web root.

How to fix Directory Traversal?

There is no fixed version for serve-here.

*
Go back to all versions of this package