Description
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Remediation
References
https://hackerone.com/reports/309648
Related Vulnerabilities
CVE-2022-25873 Vulnerability in maven package org.webjars.bowergithub.vuetifyjs:vuetify
CVE-2020-28438 Vulnerability in npm package deferred-exec
CVE-2017-1000042 Vulnerability in npm package mapbox.js
CVE-2020-26256 Vulnerability in maven package org.webjars.npm:fast-csv
CVE-2023-5245 Vulnerability in maven package ml.combust.bundle:bundle-ml_2.12