CVE-2022-21192

Directory Traversal vulnerability in serve-lite in npm/serve-lite

Identifiers

CVE-2022-21192, GHSA-5qq4-m6c3-xxmf

Package Slug

npm/serve-lite

Vulnerability

Directory Traversal vulnerability in serve-lite

Description

All versions of the package serve-lite is vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().

Affected Versions

All versions

Solution

Unfortunately, there is no solution available yet.

Last Modified

2023-01-31

source