description: The inert directory handler in inert node module before 1.1.1 always allows files in hidden directories to be served, even when `showHidden` is false.
problem types: Path Traversal (CWE-22)
affected:
{
product: inert node module
vendor: HackerOne
versions:
status: affected, version: <1.1.1
}