{"id":1441104,"name":"augustine","ecosystem":"npm","description":"Another very simple HTTP server for serving static resources.","homepage":"https://github.com/princetoad/augustine#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/princetoad/augustine","keywords_array":["http-server","web-server","javascript","node.js"],"namespace":null,"versions_count":14,"first_release_published_at":"2017-05-06T06:53:36.812Z","latest_release_published_at":"2017-06-26T09:04:17.544Z","latest_release_number":"0.2.3","last_synced_at":"2026-10-14T09:24:41.616Z","created_at":"2022-04-09T01:16:30.167Z","updated_at":"2026-10-15T04:20:46.619Z","registry_url":"https://www.npmjs.com/package/augustine","install_command":"npm install augustine","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.2.3"},"contentPolicy":null},"repo_metadata":{},"repo_metadata_updated_at":"2026-10-12T11:25:56.013Z","dependent_packages_count":2,"downloads":243,"downloads_period":"last-month","dependent_repos_count":1,"rankings":{"downloads":42.848994591934996,"dependent_repos_count":10.319081594997954,"dependent_packages_count":20.947084095572265,"stargazers_count":null,"forks_count":null,"docker_downloads_count":null,"average":24.70505342750174},"purl":"pkg:npm/augustine","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3Y2gtZndteC1jZjQ3","url":"https://github.com/advisories/GHSA-4wch-fwmx-cf47","title":"Directory Traversal in augustine","description":"Affected versions of `augustine` resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system.\n\n## Proof of Concept\n```http\nGET //etc/passwd HTTP/1.1\nhost:foo\n```\n\n\n## Recommendation\n\nNo direct patch is available at this time. \n\nCurrently, the best mitigation for this flaw is to use a different, functionally equivalent static file server package.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2018-09-18T13:50:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2017-0930","https://hackerone.com/reports/296282","https://github.com/advisories/GHSA-4wch-fwmx-cf47","https://www.npmjs.com/advisories/559"],"source_kind":"github","identifiers":["GHSA-4wch-fwmx-cf47","CVE-2017-0930"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:19.716Z","updated_at":"2026-10-15T03:14:41.490Z","epss_percentage":0.01198,"epss_percentile":0.67525,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3Y2gtZndteC1jZjQ3","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3Y2gtZndteC1jZjQ3","packages":[{"ecosystem":"npm","package_name":"augustine","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.2.3"}],"purl":"pkg:npm/augustine"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR3Y2gtZndteC1jZjQ3/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/augustine","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/augustine","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/augustine/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/augustine/codemeta","maintainers":[{"uuid":"princetoad","login":"princetoad","name":null,"email":"tom@tfan.org","url":null,"packages_count":63,"html_url":"https://www.npmjs.com/~princetoad","role":null,"created_at":"2022-11-11T12:38:57.588Z","updated_at":"2022-11-11T12:38:57.588Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/princetoad/packages"}]}