← Back to CVE List

CVE-2023-26111

Published: 2023-03-06T05:15Z
Last Modified: 2025-03-05T21:15Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt