Versions 1.1.1 and earlier of inert
are vulnerable to an information leakage vulnerability which causes files in hidden directories to be served, even when showHidden is false.
The inert directory handler always allows files in hidden directories to be served, even when showHidden
is false.
Update to version >= 1.1.1.