mcstatic vulnerabilities and fixes

Q: How do I fix mcstatic vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is mcstatic being exploited right now?

None of the tracked mcstatic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which mcstatic CVE should I patch first?

CVE-2018-3730 currently ranks highest (56/100): mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which .

Recent CVEs affecting mcstatic, with upgrade or downgrade steps. 2 tracked.

mcstatic has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-02-01. Highest priority: CVE-2018-3730 (score 56/100).

CVE-2018-3730 HIGH 7.5 DOWNGRADE mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which
CVE-2018-16482 HIGH 7.5 UPGRADE A server directory traversal vulnerability was found on node module mcstatic <=0.0.20 that would allow an atta

FAQ

How do I fix mcstatic vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is mcstatic being exploited right now?

None of the tracked mcstatic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which mcstatic CVE should I patch first?

CVE-2018-3730 currently ranks highest (56/100): mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which .

← Back to latest CVEs