← Database

CVE-2024-43800

MEDIUM CVSS: 5.0 Published: 2024-09-10 Modified: 2026-06-17

Description

serve-static serves static files. serve-static passes untrusted user input - even after sanitizing it - to redirect() may execute untrusted code. This issue is patched in serve-static 1.16.0.

Affected Platforms

Openjsf Serve-Static

Weakness Type

CWE-79

References