serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Upgrading serve-static From 1.10.3 to 2.2.1
25 releases in betweennotes for 24
- ?
- changes to make
- 1
- advisory fixed
- 1+
- new
- 3+
- fixes
Counted from 24 of 25 release notes. Advisories are counted from the advisory database, in full.
Security
Fixes 1 advisory affecting 1.10.3
- serve-static vulnerable to template injection that can lead to XSSlow · GHSA-cm22-4g7w-348p
Release by release
- new
Remove
HISTORY.mdfrom tarball content
- new
1.14.0 – 2.2.011 releases, nothing new or fixed; 1 without a note
- fixed
Fix incorrect end tag in redirects
- fixed
- fixed
Fix regression when
rootis incorrectly set to a file
- fixed
1.11.2 – 1.13.09 releases, nothing new or fixed in the notes
- fixed
Fix redirect error when
req.urlcontains raw non-URL characters
- fixed
1.11.0nothing new or fixed in the note
12 other lines we could not sort, mostly version bumps
- 2.2.0
Refactor HISTORY.md header update to use String.prototype.repeat
- 2.2.0
Conditionally set headers (if not already set) in redirect response
- 2.2.0
Revert "feat: conditionally set headers (if not already set) in redirect response (#190)"
- 2.2.0
Release 2.2.0
- 2.1.0
Remove link renderization in html while redirecting (#173)
- 2.1.0
Update dev deps
- 2.1.0
Update prod deps for v2
- 2.1.0
Release 2.0
- 1.16.2
encodeurl@~2.0.0
- 1.14.1
Set stricter CSP header in redirect response
48 internal lines (docs, tests, tooling) left out.