https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T03:56:23.002310+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11455 cnvd-2018-11455 2026-10-03T03:56:23.070095+00:00 cnvd-2018-11455 https://cve.radiocsirt.org/vuln/euvd-2026-183371 EUVD-2026-183371 2026-10-03T03:56:23.070136+00:00 EUVD-2026-183371 https://cve.radiocsirt.org/vuln/fkie_cve-2014-10068 fkie_cve-2014-10068 2026-10-03T03:56:23.070151+00:00

The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.

 https://cve.radiocsirt.org/vuln/ghsa-g4xp-36c3-f7mr GHSA-g4xp-36c3-f7mr — Hidden Directories Always Served in inert 2026-10-03T03:56:23.070181+00:00

Affected: npm: inert

Versions 1.1.1 and earlier of `inert` are vulnerable to an information leakage vulnerability which causes files in hidden directories to be served, even when showHidden is false.

The inert directory handler always allows files in hidden directories to be served, even when `showHidden` is false.

## Recommendation

Update to version >= 1.1.1.

 https://cve.radiocsirt.org/vuln/gsd-2014-10068 gsd-2014-10068 2026-10-03T03:56:23.070209+00:00 gsd-2014-10068