CVE-2020-7684: 
JavaScript vulnerability analysis and mitigation

CVE-2020-7684 affects all versions of the package rollup-plugin-serve. The vulnerability was discovered and disclosed in January 2020, as indicated by the CVE record creation date of January 21, 2020. The vulnerability exists due to a lack of path sanitization in readFile operation (CVE).

The vulnerability stems from the absence of path sanitization in the readFile operation within the rollup-plugin-serve package. This security flaw could potentially allow unauthorized file access (CVE, Snyk).

The vulnerability could potentially allow attackers to access files outside of the intended directory structure through path traversal, potentially exposing sensitive information or system files (Snyk).

The vulnerability affects all versions of the rollup-plugin-serve package, making it a widespread issue for applications using this dependency (CVE).