deliver-or-else@1.0.0 vulnerabilities
Serves local files from the server unto the client in the form of a Promise.
latest version
1.0.0
first published
6 years ago
latest version published
6 years ago
licenses detected
- >=0
Direct Vulnerabilities
Known vulnerabilities in the deliver-or-else package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
deliver-or-else is a module used to deliver local files automatically to the client depending on the URL Affected versions of this package are vulnerable to Directory Traversal via the url, which doesn't verify the file is from the root directory path. How to fix Directory Traversal? There is no fixed version for | * |