Description
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function.
Remediation
References
https://snyk.io/vuln/SNYK-JS-ROLLUPPLUGINSERVER-590123
Related Vulnerabilities
CVE-2022-2218 Vulnerability in maven package org.webjars.npm:parse-url
CVE-2020-14966 Vulnerability in maven package org.webjars.npm:jsrsasign
CVE-2021-28164 Vulnerability in maven package org.eclipse.jetty:jetty-webapp
CVE-2023-26117 Vulnerability in npm package angular
CVE-2023-37910 Vulnerability in maven package org.xwiki.platform:xwiki-platform-attachment-api