Skip to main content
cve.nowby Sazabi
← npm
npmPackage

simplehttpserver

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
npm

Advisories 3

  • A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

    Affected: through 0.3.0.

  • Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.

    Affected: fixed in 0.2.1.

  • simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

    Affected: fixed in 0.1.0.