fancy-server@0.1.0 vulnerabilities

Serve Markdown files from the current directory

Direct Vulnerabilities

Known vulnerabilities in the fancy-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Directory Traversal

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory.

Source: Node Security Project

How to fix Directory Traversal?

Upgrade to version 0.1.4 or greater.

<0.1.4
  • M
Directory Traversal

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as ../ to read files outside of the served directory.

Source: Node Security Project

How to fix Directory Traversal?

Upgrade to version 0.1.4 or greater.

<0.1.4