Description
This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation.
Remediation
References
https://vuldb.com/?id.158745
https://snyk.io/vuln/SNYK-JS-FASTHTTP-572886
Related Vulnerabilities
CVE-2023-27495 Vulnerability in npm package @fastify/csrf-protection
CVE-2022-34870 Vulnerability in maven package org.apache.geode:geode-pulse
CVE-2017-18077 Vulnerability in maven package org.webjars.npm:brace-expansion
CVE-2020-10758 Vulnerability in maven package org.keycloak:keycloak-wildfly-server-subsystem
CVE-2017-12617 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core