Homepage
About Snyk

simple-server@0.1.2 vulnerabilities

Simple Server allows you to easily get a node.js static file server up and running anywhere anytime.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the simple-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Cross-site Scripting (XSS)

simple-server allows you to easily get a node.js static file server up and running anywhere anytime.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS). It allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript. This is caused by outdated version of connect framework.

How to fix Cross-site Scripting (XSS)?

Upgrade simple-server to version 1.1.0 or higher.

<1.1.0
Go back to all versions of this package