johnpapa / johnpapa/lite-server
npm & github recommend not using: "All versions of package lite-server are vulnerable to Denial of Service"
- Dominant language
- JavaScript
- Stars
- 2.3k
- Forks
- 262
- PR merge metrics
- No merged PRs in 30d
Description

```sh
npm audit
# npm audit report
lite-server *
Severity: high
lite-server vulnerable to Denial of Service - https://github.com/advisories/GHSA-89w7-5q45-r53w
No fix available
node_modules/lite-server
1 high severity vulnerability
```
Links to advisory: https://github.com/advisories/GHSA-89w7-5q45-r53w
> All versions of package lite-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.