serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Upgrading serve-static From 1.6.4 to 1.6.5
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 0
- fixes
Security
2 advisories still affect 1.6.5
- Open Redirect in serve-staticlow · GHSA-c3x7-gjmx-r2ff
- serve-static vulnerable to template injection that can lead to XSSlow · GHSA-cm22-4g7w-348p
Upgrading to 1.16.0 clears them.
- 1.6.5
Fix potential open redirect when mounted at root