CVE-2019-15596

Name of the Vulnerable Software and Affected Versions statics-server versions all

Description A path traversal issue exists in the statics-server, allowing an attacker to perform a path traversal when a symlink is used within the working directory. This is due to the package failing to limit access to files outside of the served folder through symlinks.

Recommendations For all versions, consider using an alternative module until a fix is made available. Do not use statics-server in production until a fix is made available.