Most recent entries from all

cnvd-2018-13879

2026-10-28T08:30:10.848785+00:00

cnvd-2018-13879

EUVD-2026-169796

2026-10-28T08:30:10.848855+00:00

EUVD-2026-169796

fkie_cve-2017-16105

2026-10-28T08:30:10.848870+00:00

serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL.

GHSA-g87g-4x3w-f8jp — Directory Traversal in serverwzl

2026-10-28T08:30:10.848900+00:00

Affected: npm: serverwzl

Affected versions of `serverwzl` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.

**Example request:** ```http GET /../../../../../../../../../../etc/passwd HTTP/1.1 host:foo ```

## Recommendation

No patch is available for this vulnerability.

It is recommended that the package is only used for local development, and if the functionality is needed for production, a different package is used instead.

gsd-2017-16105

2026-10-28T08:30:10.848945+00:00

gsd-2017-16105