Vendor/product archive

openjsf / serve-static CVEs

Beta · best-effort

1 CVEs tagged to openjsf / serve-static — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to openjsf vendor archive

CVE-2024-43800

Published Sep 10, 2024

serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-st…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1