Product

npm static-server vulnerabilities

1 published CVE affecting npm static-server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest npm static-server CVEs

Newest publication first

CVE-2023-26152 static-server Path Traversal vulnerability
Published 2023-10-03

HighCVSS 7.5 EPSS 1.4%

All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

npm static-server vulnerabilities

Latest npm static-server CVEs

CVE-2023-26152 static-server Path Traversal vulnerability