GHSA-j27j-4w6m-8fc4Medium

Path Traversal in statics-server

Published
March 31, 2020
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2019-15596 →

📋 Description

All versions of statics-server are vulnerable to Path Traversal. The package fails to limit access to files outside of the served folder through symlinks.

Recommendation

No fix is currently available. Do not use statics-server in production or consider using an alternative module until a fix is made available.

🎯 Affected products1

  • npm/statics-server:<= 0.0.9

🔗 References (4)