Approved changes feed: RSS · Atom

cpe:2.3:a:simplehttpserver_project:simplehttpserver:*:*:*:*:*:node.js:*:*

part: a version: * update: *

VendorSimplehttpserver Project (059e4ef0-0841-59eb-a37d-f702dfa67ea7)
ProductSimplehttpserver (81f8ef58-a548-598b-b03b-b80e02d79a12)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3787 vulnerable 2026-06-08 05:11:41.290023 Details available
Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server.
Published: 2018-08-31T16:00:00.000Z
Updated: 2024-09-16T18:03:37.666Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3716 vulnerable 2026-06-08 05:11:41.160042 Details available
simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.
Published: 2018-06-07T02:00:00.000Z
Updated: 2024-09-17T02:53:14.084Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16478 vulnerable 2026-06-08 05:11:04.917915 Details available
A Path Traversal in simplehttpserver versions <=0.2.1 allows to list any file in another folder of web root.
Published: 2018-12-04T14:00:00.000Z
Updated: 2024-08-05T10:24:32.870Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.