Description
http_static_simple is an http server. http_static_simple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/http_static_simple
https://nodesecurity.io/advisories/472
Related Vulnerabilities
CVE-2021-21267 Vulnerability in npm package schema-inspector
CVE-2021-23369 Vulnerability in npm package handlebars
CVE-2015-8857 Vulnerability in npm package uglify-js
CVE-2021-21119 Vulnerability in maven package org.webjars.npm:electron
CVE-2016-10533 Vulnerability in npm package express-restify-mongoose