Skip to main content
cve.nowby Sazabi
← npm
npmPackage

statics-server

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
npm

Advisories 2

  • A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within…

    Affected: through 0.0.9.

  • An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the…

    Affected: through 0.0.9.