GHSA-wm77-q74p-5763HighDisclosed before NVD

Path Traversal in superstatic

Published
July 27, 2018
Last Modified
January 9, 2023

📋 Description

Affected of superstatic are vulnerable to path traversal when used on Windows.

Additionally, it is vulnerable to path traversal on other platforms combined with certain Node.js versions which erroneously normalize \\ to / in paths on all platforms (a known example being Node.js v9.9.0).

Recommendation

Update to version 5.0.2 or later.

🎯 Affected products1

  • npm/superstatic:< 5.0.2

🔗 References (5)