Security: tinyhttp/tinyhttp
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Cross-site ScriptingGHSA-rqg5-h5qr-gp89 published
Aug 10, 2026 by v1rtlModerate -
Malformed Range Header Causes Uncaught Exception DoS in @tinyhttp/sendGHSA-w65r-fqv6-q6w9 published
Aug 10, 2026 by v1rtlHigh -
Open Redirect via Backslash Preservation in @tinyhttp/resGHSA-8q4p-mhxr-fq83 published
Jul 18, 2026 by v1rtlModerate -
Path Traversal in `res.sendFile()` and `res.download()` when `root` option is not specified.GHSA-6j45-w2wp-gg6g published
Jul 18, 2026 by v1rtlModerate -
@tinyhttp/cookie-signature: signature verification does not use full signatureGHSA-63x4-8g8c-vhww published
Aug 10, 2026 by v1rtlLow
Learn more about advisories related to tinyhttp/tinyhttp in the GitHub Advisory Database