better-helperjs <= 3.0.5 Directory Traversal Vulnerability

A directory traversal vulnerability in better-helperjs <= 3.0.5 allows reading arbitrary files in adjacent directories with the same prefix as the static root.

Applications using better-helperjs <= 3.0.5 in production mode (NODE_ENV=production).

Upgrade to version >= 3.0.6 or apply the workaround: ensure no sensitive directories are deployed adjacent to the static root with the same prefix.