https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T16:12:01.556464+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-90494 CVE-2026-90494 — restify node-restify static.js serveStatic path traversal 2026-10-02T16:12:02.365704+00:00

Affected: restify node-restify

A flaw has been found in restify node-restify up to 12.0.0. This affects the function serveStatic in the library /lib/plugins/static.js. This manipulation causes path traversal. The attack can be initiated remotely. The vendor was contacted early about this disclosure but did not respond in any way.