description: A path traversal vulnerability in <= v0.2.6 of http-file-server npm module allows attackers to list files in arbitrary folders.
problem types: Path Traversal (CWE-22)
affected:
{
product: http-file-server
vendor: n/a
versions:
status: affected, version: 0.2.6
}