CVE-2020-7686: Rollup-Plugin-Dev-Server Project Rollup-Plugin-Dev-Server

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

This affects all versions of package rollup-plugin-dev-server. There is no path sanitization in readFile operation inside the readFileFromContentBase function.

Affected products

• Rollup-Plugin-Dev-Server Project Rollup-Plugin-Dev-Server: any version

Published 2020-07-25. Last modified 2026-06-17.