CVE-2014-10066: Fancy-Server Project Fancy-Server

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Versions less than 0.1.4 of the static file server module fancy-server are vulnerable to directory traversal. An attacker can provide input such as `../` to read files outside of the served directory.

Affected products

• Fancy-Server Project Fancy-Server: before 0.1.4 (fixed in 0.1.4)

Published 2018-05-31. Last modified 2026-06-17.