CVE-2021-23797: HTTP-Server-Node Project HTTP-Server-Node

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is.

Affected products

Published 2021-12-17. Last modified 2026-06-17.