GitHub Advisoryadvisory · npm

GHSA-vmhw-fhj6-m3g5 Path Traversal in angular-http-server

HIGH Published 2019-05-31 Modified 2026-02-11 Official page ↗
Ecosystem
npm
Packages
angular-http-server
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2019-05-31

Affected packages

• npm angular-http-server: < 1.4.4 → fixed in 1.4.4

Description

Versions of `angular-http-server` before 1.4.4 are vulnerable to path traversal. Recommendation Update to version 1.4.4 or later.

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References