html-pages@2.1.3 vulnerabilities

Simple development HTTP Server for file serving and directory listing made by a Designer. Use it for hacking your HTML/JavaScript/CSS files but not for deploying your final site.

Direct Vulnerabilities

Known vulnerabilities in the html-pages package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

html-pages is a simple development http server for file serving and directory listing made by a Designer.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to the absence of sanitization of the paths before rendering.

How to fix Cross-site Scripting (XSS)?

There is no fixed version for html-pages.

*
  • H
Directory Traversal

html-pages is a Simple development HTTP Server for file serving and directory listing made by a Designer. Use it for hacking your HTML/JavaScript/CSS files but not for deploying your final site..

Affected versions of the package are vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following url /..%2f..%2fetc/passwd would result in /etc/passwd leak.

How to fix Directory Traversal?

There is no fixed version for html-pages.

*