Homepage

@vendure/asset-server-plugin

The `AssetServerPlugin` serves assets (images and other files) from the local file system. It can also perform on-the-fly image transformations and caches the results for subsequent calls.
Licenses: MIT | GPL-3.0
Published: 7 years ago Last updated: 5 days ago Latest version: 3.7.4 Latest non-vulnerable version: 3.8.0-minor-202610100228

License

MIT>=0.1.0 <3.0.0-next.0;
GPL-3.0>=3.0.0-next.0;
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the @vendure/asset-server-plugin package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Directory Traversal

<2.3.3>=3.0.0 <3.0.5

Package versions

759 VERSIONS IN TOTAL See all versions
versionpublisheddirect vulnerabilities
3.8.0-minor-20261010022810 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100902319 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100817538 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100816008 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100802208 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100702287 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100617346 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100605596 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100602236 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
3.8.0-minor-2026100502315 Oct, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L