CVE-2023-26152

Name of the Vulnerable Software and Affected Versions static-server versions all

Description The issue arises from improper input sanitization passed via the validPath function of server.js, leading to Directory Traversal. This vulnerability affects a popular library that had 100,000 weekly downloads up to a year ago and is still actively downloaded.

Recommendations For all versions, consider disabling the validPath function of server.js as a temporary workaround until a patch is available. Restrict access to sensitive directories to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.