Description
All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization.
Remediation
References
https://github.com/xudafeng/startserver/blob/bef0c4e4d21da42a40ce87cf25fd54ac8d8cb2d8/lib/index.js%23L71
https://snyk.io/vuln/SNYK-JS-STARTSERVER-1296388
Related Vulnerabilities
CVE-2017-18869 Vulnerability in maven package org.webjars.npm:chownr
CVE-2023-33779 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2022-43670 Vulnerability in maven package org.apache.sling:org.apache.sling.cms
CVE-2016-6794 Vulnerability in maven package org.apache.tomcat:tomcat-util-scan
CVE-2023-34455 Vulnerability in maven package org.xerial.snappy:snappy-java