Description
cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
Remediation
References
https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/cypserver
https://nodesecurity.io/advisories/440
Related Vulnerabilities
CVE-2020-26282 Vulnerability in maven package com.browserup:browserup-proxy-rest
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport-native-unix-common-tests
CVE-2021-43138 Vulnerability in maven package org.webjars.bower:async
CVE-2023-26486 Vulnerability in npm package vega
CVE-2019-3580 Vulnerability in maven package org.openrefine:openrefine