CVE-2018-3716: Simplehttpserver Project Simplehttpserver

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.

Affected products

• Simplehttpserver Project Simplehttpserver: any version

Published 2018-06-07. Last modified 2026-06-17.