Description
A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server.
Remediation
References
https://hackerone.com/reports/358645
Related Vulnerabilities
CVE-2016-10531 Vulnerability in npm package marked
CVE-2020-7635 Vulnerability in npm package compass-compile
CVE-2022-31198 Vulnerability in npm package @openzeppelin/contracts-upgradeable
CVE-2022-29567 Vulnerability in maven package com.vaadin:vaadin
CVE-2023-30519 Vulnerability in maven package org.jenkins-ci.plugins:quayio-trigger