serve-static

2.2.1 · 15 Dec 2025MIT202.2M / weekRepository Homepage npm Atom feed

Your version

1.13.2

7 Feb 2018Where it was published

1.16.3 is the newest release of 1.x.

In short

1 fixed

Security

1 advisory affects 1.13.2; 1.16.0 fixes them

Low
serve-static vulnerable to template injection that can lead to XSSGHSA-cm22-4g7w-348p · 10 Sep 2024
Fixed in 1.16.0

Release note

Fix incorrect end tag in redirects
- deps: encodeurl@~1.0.2
  - Fix encoding % as last character
- deps: send@0.16.2
  - deps: depd@~1.1.2
  - deps: encodeurl@~1.0.2
  - deps: statuses@~1.4.0