GHSA-74cp-qw7f-7hpw
Path Traversal in statics-server
All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
What each source reports
GitHub AdvisoriesNo score
Path Traversal in statics-server
All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
- Record
GHSA-74cp-qw7f-7hpw- Weakness
- CWE-22
- Updated
- 2026-11-02
OSVNo score
Path Traversal in statics-server
All versions of statics-server are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.
Recommendation
No fix is currently available. Consider using an alternative module until a fix is made available.
- Record
GHSA-74cp-qw7f-7hpw- Weakness
- CWE-22
- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
statics-servernpm | through 0.0.9 | None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-74cp-qw7f-7hpw is a vulnerability with no CVSS score yet in statics-server, published June 5, 2019. No source lists public exploit code. No source names a fixed version.