Path Traversal

Overview

Versions of node-srv before 2.1.1 are vulnerable to path traversal allowing a remote attacker to read files from the server that uses node-srv.

Recommendation

Update to version 2.1.1 or later.

References

• HackerOne Report
• GitHub Advisory