Most recent entries from all

cnvd-2018-13864

2026-10-28T08:29:43.202334+00:00

cnvd-2018-13864

EUVD-2026-167532

2026-10-28T08:29:43.202371+00:00

EUVD-2026-167532

fkie_cve-2017-16083

2026-10-28T08:29:43.202386+00:00

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

GHSA-5w8q-x7hc-jhp6 — Directory Traversal in node-simple-router

2026-10-28T08:29:43.202416+00:00

Affected: npm: node-simple-router

Affected versions of `node-simple-router` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

**Example request:** ```http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo ```

## Recommendation

Update to v0.10.1 or later.

gsd-2017-16083

2026-10-28T08:29:43.202444+00:00

gsd-2017-16083