Description
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
Remediation
References
https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINSERVER-590123
Related Vulnerabilities
CVE-2021-3807 Vulnerability in npm package ansi-regex
CVE-2020-7704 Vulnerability in npm package linux-cmdline
CVE-2020-26259 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2023-49397 Vulnerability in maven package com.jfinal:jfinal
CVE-2021-41184 Vulnerability in maven package org.webjars.npm:jquery-ui