Description
A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
Remediation
References
https://hackerone.com/reports/358645
Related Vulnerabilities
CVE-2023-22491 Vulnerability in npm package gatsby-transformer-remark
CVE-2023-40787 Vulnerability in maven package org.springblade:blade-core-tool
CVE-2022-24723 Vulnerability in npm package urijs
CVE-2021-21331 Vulnerability in maven package com.datadoghq:datadog-api-client
CVE-2023-34235 Vulnerability in npm package @strapi/database