Description
An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser.
Remediation
References
https://hackerone.com/reports/355458
Related Vulnerabilities
CVE-2021-3163 Vulnerability in npm package quill
CVE-2022-25858 Vulnerability in npm package terser
CVE-2021-28099 Vulnerability in maven package com.netflix.hollow:hollow
CVE-2022-38545 Vulnerability in npm package valine
CVE-2022-41929 Vulnerability in maven package org.xwiki.platform:xwiki-platform-oldcore