Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/statics-server@0.0.8
purl pkg:npm/statics-server@0.0.8
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.0
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
npm-451
Aliases:
CVE-2018-3771
Cross-site Scripting (XSS) - Generic [statics-server] XSS via injected iframe in file name when statics-server displays directory index in the … There are no reported fixed by versions.
GHSA-j27j-4w6m-8fc4
Aliases:
CVE-2019-15596
Path Traversal in statics-server All versions of `statics-server` are vulnerable to Path Traversal. The package fails to limit access to … There are no reported fixed by versions.
GHSA-74cp-qw7f-7hpw
Aliases:
GMS-2019-142
Path Traversal in statics-server All versions of `statics-server` are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can … There are no reported fixed by versions.
This package is not known to fix any advisories.