GHSA-m6fv-jmcg-4jfg moderate
send vulnerable to template injection that can lead to XSS
Affected range
SEMVER: introduced 0; fixed 0.19.0Fixed versions: 0.19.0
Better streaming static file server with Range and conditional-GET support
Evidence path
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
Latest version
1.2.1
No matching published advisory returned
Known exploitation
No KEV match
Checked by exact CVE identifier
Highest advisory severity
Moderate
3 active advisories
The registry confirms the version, then OSV checks advisories for that exact value.
Published records
Affected range
SEMVER: introduced 0; fixed 0.19.0Fixed versions: 0.19.0
Affected range
SEMVER: introduced 0; fixed 0.11.1Fixed versions: 0.11.1
Affected range
SEMVER: introduced 0; fixed 0.8.4Fixed versions: 0.8.4