serve-lite (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package serve-lite, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-21192 — CVSS 7.5 (high): All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and…
• CVE-2022-25847 — CVSS 5.4 (medium): All versions of the package serve-lite are vulnerable to Cross-site Scripting (XSS) because when it detects a request to a directory, it…