PatchTheCVEserve-static project vulnerabilities
Recent CVEs affecting serve-static project products. 1 tracked.
serve-static project has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2015-01-21. Highest priority: CVE-2015-1164 (score 36/100).
- CVE-2015-1164 MEDIUM 4.3 UPGRADE Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, all
FAQ
How do I fix serve-static project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is serve-static project being exploited right now?
None of the tracked serve-static project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which serve-static project CVE should I patch first?
CVE-2015-1164 currently ranks highest (36/100): Open redirect vulnerability in the serve-static plugin before 1.7.2 for Node.js, when mounted at the root, all.