npm - OSV

MAL-2026-11568

npm/@nebula.js/cli-serve

Malicious code in @nebula.js/cli-serve (npm) 04 Aug

No fix available

GHSA-8v3q-9vmx-36vc

npm/dbgate-serve

DbGate: Unauthenticated Remote Code Execution via JSON Script Runner 05 Jun

Fix available
Severity - 10.0 (Critical)

MAL-2025-48012

npm/webpack-dev-serve-middleware

Malicious code in webpack-dev-serve-middleware (npm) 07 Oct 2025

No fix available

MAL-2025-47508

npm/webpack-serve-middleware

Malicious code in webpack-serve-middleware (npm) 22 Sep 2025

No fix available

MAL-2025-36212

npm/test-mlw2-serve-notum

Malicious code in test-mlw2-serve-notum (npm) 14 Aug 2025

No fix available

MAL-2025-36991

npm/tma-serve-mobiledeviceunlock

Malicious code in tma-serve-mobiledeviceunlock (npm) 14 Aug 2025

No fix available

MAL-2025-8910

npm/@malware-test-serve-mutch-uncut-mothy/test-mlw3-serve-mutch-uncut-mothy

Malicious code in @malware-test-serve-mutch-uncut-mothy/test-mlw3-serve-mutch-uncut-mothy (npm) 14 Aug 2025

No fix available

MAL-2025-141

npm/serve-static-corell

Malicious code in serve-static-corell (npm) 19 Jan 2025

No fix available

GHSA-cm22-4g7w-348p

npm/serve-static

serve-static vulnerable to template injection that can lead to XSS 10 Sep 2024

Fix available
Severity - 2.3 (Low)

GHSA-5qq4-m6c3-xxmf

npm/serve-lite

Directory Traversal vulnerability in serve-lite 26 Jan 2023

No fix available
Severity - 7.5 (High)

GHSA-j8x7-qcw4-xx85

npm/serve-lite

Cross-site Scripting (XSS) in serve-lite 26 Jan 2023

No fix available
Severity - 5.4 (Medium)

GHSA-4448-rc82-fcr7

npm/serve-here.js

Path Traversal in serve-here.js 22 Sep 2021

Fix available
Severity - 5.3 (Medium)

GHSA-5rc4-8qqh-vq7f

npm/serve

vercel/serve allows access to restricted files if filename is URL encoded. 09 Aug 2021

Fix available
Severity - 5.3 (Medium)

GHSA-4j46-mp85-mv8c

npm/rollup-plugin-serve

Path traversal in rollup-plugin-serve 18 May 2021

Fix available
Severity - 9.8 (Critical)

GHSA-cpgr-wmr9-qxv4

npm/serve

Cross-Site Scripting in serve 11 Sep 2020

Fix available

GHSA-xw79-hhv6-578c

npm/serve

Cross-Site Scripting in serve 11 Sep 2020

Fix available

Vulnerabilities