Package: node-serve-static Severity: grave Tags: security Justification: user security hole Hi, please see https://nodesecurity.io/advisories/serve-static-open-redirect Cheers, Moritz