Known Vulnerabilities in serve-static