Description
This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation.
Remediation
References
https://vuldb.com/?id.158745
https://snyk.io/vuln/SNYK-JS-FASTHTTP-572886
Related Vulnerabilities
CVE-2022-38750 Vulnerability in maven package org.yaml:snakeyaml
CVE-2021-31406 Vulnerability in maven package com.vaadin:flow-server
CVE-2019-0205 Vulnerability in maven package org.webjars.npm:thrift
CVE-2019-8903 Vulnerability in npm package total.js
CVE-2020-2287 Vulnerability in maven package org.jenkins-ci.plugins:audit-trail