html-pages@0.0.1 vulnerabilities
Simple development HTTP Server for file serving and directory listing made by a Designer. Use it for hacking your HTML/JavaScript/CSS files but not for deploying your final site.
-
latest version
3.1.0
-
first published
7 years ago
-
latest version published
5 years ago
-
licenses detected
- >=0.0.1 <0.0.2
Direct Vulnerabilities
Known vulnerabilities in the html-pages package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
html-pages is a simple development http server for file serving and directory listing made by a Designer. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to the absence of sanitization of the paths before rendering. How to fix Cross-site Scripting (XSS)? There is no fixed version for |
*
|
Affected versions of html-pages are vulnerable to Directory Traversal attacks. A malisious user could read content of any file on machine where similar to presented app is running. This might expose vectors to attack system with Remote Code Execution, reveals files with usernames and passwords and many other possibilites. How to fix Directory Traversal? Upgrade |
<2.1.0
|
Affected versions of the package are vulnerable to Directory Traversal, which may allow access to sensitive files and data on the server. For example, requesting the following url How to fix Directory Traversal? There is no fixed version for |
*
|