CVE-2022-21192: Serve-Lite Project Serve-Lite

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

All versions of the package serve-lite are vulnerable to Directory Traversal due to missing input sanitization or other checks and protections employed to the req.url passed as-is to path.join().

Affected products

• Serve-Lite Project Serve-Lite: any version

Published 2023-01-26. Last modified 2026-06-17.