Homepage
About Snyk

http-live-simulator@1.0.6 vulnerabilities

HTTP Server that serves with random delay for live simulations

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the http-live-simulator package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Denial of Service (DoS)

http-live-simulator is a simple http file server for local development written in Node.JS.

Affected versions of this package are vulnerable to Denial of Service (DoS) while requesting a directory.

How to fix Denial of Service (DoS)?

A fix was pushed into the master branch but not yet published.

*
  • H
Directory Traversal

http-live-simulator is a simple http file server for local development written in Node.JS.

Affected versions of this package are vulnerable to Directory Traversal. An attacker could read arbitrary files from any location on disk.

Note This vulnerability is due to an incomplete fix in SNYK-JS-HTTPLIVESIMULATOR-72456

How to fix Directory Traversal?

Upgrade http-live-simulator to version 1.0.7 or higher.

<1.0.7
Go back to all versions of this package