Description
All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.
Remediation
References
https://github.com/xudafeng/startserver/blob/bef0c4e4d21da42a40ce87cf25fd54ac8d8cb2d8/lib/index.js%23L71
https://snyk.io/vuln/SNYK-JS-STARTSERVER-1296388
Related Vulnerabilities
CVE-2021-23639 Vulnerability in npm package md-to-pdf
CVE-2020-13942 Vulnerability in maven package org.apache.unomi:unomi-kar
CVE-2022-2466 Vulnerability in maven package io.quarkus:quarkus-smallrye-graphql
CVE-2022-31180 Vulnerability in npm package shescape
CVE-2022-31069 Vulnerability in npm package @finastra/nestjs-proxy