Versions of servey prior to 3.x are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths.

Recommendation

Upgrade to the latest version

References

• typeorm/typeorm@d46c8b0
• https://hackerone.com/reports/355501
• https://www.npmjs.com/advisories/802