← Back

Serve Static

serve-static

Vendor: Openjsf • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-43800
1Openjsf
1Serve Static
Sep 20, 2024
Sep 10, 2024
N/A· v4
4.7 MEDIUM· v3
N/A· v2
serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.