high7.5
CVE-2022-21192
Directory Traversal vulnerability in serve-lite
Impact
All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | serve-lite | <= 1.1.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serve-Lite Project | Serve-Lite | All versions |