Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-ybzn-ajyd-qffr
|
Open Redirect
When using serve-static middleware version < 1.7.2 and it's configured to mount at the root it creates an open redirect on the site.
For example:
If a user visits `http://example.com//www.google.com/%2e%2e` they will be redirected to `//www.google.com/%2e%2e`, which some browsers interpret as `http://www.google.com/%2e%2e`.
|
CVE-2015-1164
|