GHSA-88v8-v46g-6c9w

Source

https://github.com/advisories/GHSA-88v8-v46g-6c9w

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-88v8-v46g-6c9w/GHSA-88v8-v46g-6c9w.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-88v8-v46g-6c9w

Aliases

CVE-2022-25936

Published

2023-01-30T06:30:27Z

Modified

2025-09-25T22:02:01Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Servst vulnerable to Path Traversal

Details

Versions of the package servst before 2.0.3 are vulnerable to Directory Traversal due to improper sanitization of its filePath variable.

Database specific

{
    "nvd_published_at": "2023-01-30T05:15:00Z",
    "severity": "HIGH",
    "cwe_ids": [
        "CWE-22"
    ],
    "github_reviewed_at": "2023-02-01T01:38:11Z",
    "github_reviewed": true
}

References

Affected packages

npm / servst

Package

Name: servst; View open source insights on deps.dev
Purl: pkg:npm/servst

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.0.3

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/01/GHSA-88v8-v46g-6c9w/GHSA-88v8-v46g-6c9w.json"