angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a malicious user to read content of any file with known path.
CVSS 3.1MEDIUM 6.5·Network·Low privileges·No interaction·EPSS 0.01452·Published 2018-06-07·Fixed in 1.6.0CWE-22