Vulnerabilities > Zeit > Serve > 0.6.0

DATE CVE VULNERABILITY TITLE RISK
2018-06-07 CVE-2018-3718 Unspecified vulnerability in Zeit Serve
serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.
network
low complexity
zeit
5.3
2018-06-07 CVE-2018-3712 Path Traversal vulnerability in Zeit Serve
serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path.
network
low complexity
zeit CWE-22
4.0