GHSA-f5mh-hq6h-whxv
GitHub Security Advisory
Directory Traversal in bitty
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
Affected versions of `bitty` are vulnerable to directory traversal via the URL path in GET requests.
## Recommendation
The `bitty` package is not currently maintained, and has not seen an update since 2015.
At this time, the best available mitigation is to use an alternative module that is actively maintained and provides similar functionality, such as [serve](https://www.npmjs.com/package/serve).
Affected Packages
npm
bitty
Affected versions:
0
(last affected: 0.2.10)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: July 4, 2025 6:02 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.