serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Your version
1.16.3 is the newest release of 1.x.
In short
1 security
- security
Fix potential open redirect when mounted at root
Security
2 advisories affect 1.6.5; 1.16.0 fixes them
- Lowserve-static vulnerable to template injection that can lead to XSSGHSA-cm22-4g7w-348p · 10 Sep 2024Fixed in 1.16.0
- LowOpen Redirect in serve-staticGHSA-c3x7-gjmx-r2ff · 31 Aug 2020Fixed in 1.7.2
Release note
- security
Fix potential open redirect when mounted at root
Back-ported from v1.7.2