node-srv is vulnerable to local file inclusion due to lack of url validation, which allows a malicious user to read content of any file with known path.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view