CVE-2023-26152

CVE-2023-26152 is a high-severity directory traversal vulnerability affecting all versions of the nbluis static-server package. This flaw, stemming from improper input sanitization in the server.js validPath function, allows an unauthenticated attacker to access arbitrary files on the server. While the CVSS score is 7.5, indicating a high risk of confidentiality impact, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.