CVE-2022-21192

CVE-2022-21192 is a high-severity directory traversal vulnerability affecting all versions of the serve-lite package. This flaw stems from insufficient input sanitization, allowing an attacker to manipulate the req.url parameter to access arbitrary files outside the intended directory. With a CVSS score of 7.5 (High), this vulnerability can be exploited remotely without authentication, leading to unauthorized information disclosure. There is currently no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.