serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Your version
1.1.0
24 Apr 20141.16.3 is the newest release of 1.x.
Security
2 advisories affect 1.1.0; 1.16.0 fixes them
- Lowserve-static vulnerable to template injection that can lead to XSSGHSA-cm22-4g7w-348p · 10 Sep 2024Fixed in 1.16.0
- LowOpen Redirect in serve-staticGHSA-c3x7-gjmx-r2ff · 31 Aug 2020Fixed in 1.7.2
Release note
No note was found for 1.1.0 on GitHub or in the repository's changelog.