https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T07:53:28.501692+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-25186 cnvd-2018-25186 2026-10-17T07:53:28.578907+00:00 cnvd-2018-25186 https://cve.radiocsirt.org/vuln/euvd-2026-68201 EUVD-2026-68201 2026-10-17T07:53:28.578947+00:00 EUVD-2026-68201 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16478 fkie_cve-2018-16478 2026-10-17T07:53:28.578962+00:00

A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.

 https://cve.radiocsirt.org/vuln/ghsa-vwr2-wj63-86gr GHSA-vwr2-wj63-86gr — Path Traversal in simplehttpserver 2026-10-17T07:53:28.578991+00:00

Affected: npm: simplehttpserver

All versions of `simplehttpserver` are vulnerable to Path Traversal.

This vulnerability allows an attacker to access files outside the webroot since it allows symlink navigation in the URL.

## Recommendation

No fix is currently available. Do not use `simplehttpserver` in production or consider using an alternative module until a fix is made available.

 https://cve.radiocsirt.org/vuln/gsd-2018-16478 gsd-2018-16478 2026-10-17T07:53:28.579019+00:00 gsd-2018-16478