serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Upgrading serve-static From 1.13.0 to 1.13.1
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
1 advisory still affects 1.13.1
- serve-static vulnerable to template injection that can lead to XSSlow · GHSA-cm22-4g7w-348p
Upgrading to 1.16.0 clears it.
Release by release
- fixed
Fix regression when
rootis incorrectly set to a file
- fixed