high7.5
CVE-2022-25848
static-dev-server vulnerable to path traversal
Impact
A path traversal vulnerability affects all versions of package static-dev-server. This is because when paths from users to the root directory are joined, the assets for the path accessed are relative to that of the root directory. There is currently no known workaround or fix for this issue.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | static-dev-server | = 1.0.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Static-Dev-Server Project | Static-Dev-Server | Version 1.0.0 |