Published: 06/03/2023 Updated: 07/11/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

Subscribe to \@nubosoftware\/node-static

All versions of the package @nubosoftware/node-static; all versions of the package node-static are vulnerable to Directory Traversal due to improper file path sanitization in the startsWith() method in the servePath function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
\\@nubosoftware\\/node-static project \\@nubosoftware\\/node-static -
node-static project node-static -

PP3: Python Essentials: a CLI/TUI application to allow users to manage the dataset of the Project P3 Criteria: Load a Table, Find a Record and Modify Notes and ToDo Status, and update a Definition of Done. This is a first-time, starter python project, as a Neurodiverse software engineer and creative..

Project Criteria 10 Introduction ✅ Data-centric command line interfaces are increasingly popular, for a wide set of use cases and implementations to model the architecture and design against these use cases; particularly in high speed trading and larger data-modeling environments In these use cases, performances is everything and using an non-graphical interface is more

CWE-22 https://github.com/cloudhead/node-static/blob/master/lib/node-static.js%23L160-L163 https://gist.github.com/lirantal/c80b28e7bee148dc287339cb483e42bc https://security.snyk.io/vuln/SNYK-JS-NUBOSOFTWARENODESTATIC-3149927 https://security.snyk.io/vuln/SNYK-JS-NODESTATIC-3149928 https://nvd.nist.gov https://github.com/iPoetDev/PyCriteria

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-26111

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect