CVE-2017-16130

Name of the Vulnerable Software and Affected Versions: exxxxxxxxxxx versions (affected versions not specified)

Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This is achieved by placing "../" in the URL, granting access to files outside the intended directory root. However, accessible files are restricted to those with a file extension. The vulnerability may result in the disclosure of private files on the system.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability. It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.