Skip to content

Vendor

serve-static project vulnerabilities

1 published CVE affecting serve-static project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of serve-static project alerts

Products

Latest serve-static project CVEs

Newest publication first

  1. CVE-2015-1164 Open Redirect in serve-static

    Published
    MediumCVSS 4.3 EPSS 2.6%

    Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a // (slash slash) followed by a domain in the PATH_INFO to the default URI...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.