Directory Traversal in bitty
Affected versions of bitty are vulnerable to directory traversal via the URL path in GET requests.
Recommendation
The bitty package is not currently maintained, and has not seen an update since 2015.
At this time, the best available mitigation is to use an alternative module that is actively maintained and provides similar functionality, such as serve.
Affected software
Click a technology to see all vulnerabilities affecting it.
| Platform | Package | Vulnerable versions | Fixed in |
|---|---|---|---|
| npm package | bitty | <= 0.2.10 | no fix |
References
- Weakness (CWE)
CWE-22- Platform
- npm
- Package
bitty- Disclosed
- 18.02.2019
- Updated
- 11.10.2026 10:22
Sources and licenses
OSV / GitHub Advisory Database - GHSA-f5mh-hq6h-whxv - CC BY 4.0
Vulnerability history: bitty
All published vulnerabilities of this package (npm package), newest first. Shows whether this is a one-off slip or a package that needs watching.
This is the only known vulnerability of this package.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.