GHSA-48gc-5j93-5cfq
Path Traversal in serve
Versions of serve prior to 10.1.2 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through relative paths, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 10.1.2 or later.
What each source reports
GitHub AdvisoriesNo score
Path Traversal in serve
Versions of serve prior to 10.1.2 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through relative paths, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 10.1.2 or later.
- Record
GHSA-48gc-5j93-5cfq- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVNo score
Path Traversal in serve
Versions of serve prior to 10.1.2 are vulnerable to Path Traversal. Explicitly ignored folders can be accessed through relative paths, which allows attackers to access hidden folders and files.
Recommendation
Upgrade to version 10.1.2 or later.
- Record
GHSA-48gc-5j93-5cfq- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
servenpm | before 10.1.2 | 10.1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-48gc-5j93-5cfq is a vulnerability with no CVSS score yet in serve, published September 11, 2020. No source lists public exploit code. Fixed in serve 10.1.2.