https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T23:19:04.559012+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-11981 cnvd-2018-11981 2026-10-27T23:19:04.562222+00:00 cnvd-2018-11981 https://cve.radiocsirt.org/vuln/euvd-2026-184689 EUVD-2026-184689 2026-10-27T23:19:04.562260+00:00 EUVD-2026-184689 https://cve.radiocsirt.org/vuln/fkie_cve-2018-3713 fkie_cve-2018-3713 2026-10-27T23:19:04.562274+00:00

angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.

 https://cve.radiocsirt.org/vuln/ghsa-4rvg-955w-h68q GHSA-4rvg-955w-h68q — Path Traversal in angular-http-server 2026-10-27T23:19:04.562301+00:00

Affected: npm: angular-http-server

Affected versions of `angular-http-server` are vulnerable to path traversal allowing a remote attacker to read files from the server that uses `angular-http-server`.

## Recommendation

Update to version 1.6.0 or later.

:exclamation: Note: This was originally thought to be fixed in version 1.4.3, though according to [this issue](https://github.com/ossf-cve-benchmark/ossf-cve-benchmark/issues/117#issuecomment-803872454) the vulnerability was not completely fixed until version 1.6.0.

 https://cve.radiocsirt.org/vuln/gsd-2018-3713 gsd-2018-3713 2026-10-27T23:19:04.562327+00:00 gsd-2018-3713