A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.
2026年9月13日
CVE-2026-90494 [MEDIUM] – A flaw has been found in restify node-restify up to 12.0.0. This affects the function serv
📑 文章目录



