serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Upgrading serve-static From 1.16.3 to 2.0.0
1 release in betweennotes for 0
Other targets from 1.16.3Latest2.2.1
2.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
- ?
- changes to make
- 0
- advisories fixed
- ?
- new
- ?
- fixes
Counted from 0 of 1 release notes. Advisories are counted from the advisory database, in full.
Security
1 advisory still affects 2.0.0
- serve-static vulnerable to template injection that can lead to XSSlow · GHSA-cm22-4g7w-348p
Upgrading to 2.1.0 clears it.