Please upgrade this vulnerable package

[PabloJomer]

http-server/package.json

Line 90 in d1b7739

"ecstatic": "^3.3.2",

Dependabot marks this as an issue:

Remediation
Upgrade ecstatic to version 4.1.3 or later. For example:

ecstatic@^4.1.3:
version "4.1.3"
Always verify the validity and compatibility of suggestions with your codebase.

Details
CVE-2019-10775
moderate severity
Vulnerable versions: < 4.1.3
Patched version: 4.1.3
ecstatic have a denial of service vulnerability. Successful exploitation could lead to crash of an application.

For more details see:

GHSA-jc84-3g44-wf2q

[zbynek]

There were multiple attempts to do that, the latest one #693 may finally work.

[thornjad]

Duplicate of #568