serve-static
2.2.1 · 15 Dec 2025MIT202.2M / weekRepositoryHomepagenpmAtom feed
Upgrading serve-static From 1.8.0 to 1.8.1
1 release in betweenevery note read
- 0
- changes to make
- 0
- advisories fixed
- 0
- new
- 1
- fix
Security
1 advisory still affects 1.8.1
- serve-static vulnerable to template injection that can lead to XSSlow · GHSA-cm22-4g7w-348p
Upgrading to 1.16.0 clears it.
Release by release
- fixed
Fix redirect loop in Node.js 0.11.14
- fixed
1 internal line (docs, tests, tooling) left out.