Vulnerabilities
2 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
| CVE-2019-15596 | A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working directory. NVD description · AI analysis pending | 7.5 | 2% | PoC |
| — | |
| CVE-2018-3771 | An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser. An XSS in statics-server <= 0.0.9 can be used via injected iframe in the filename when statics-server displays directory index in the browser. NVD description · AI analysis pending | 6.1 | <1% | PoC |
| — |