[626] Path Traversal allows to read arbitrary file from remote server

There is Path Traversal vulnerability in 626 module, which allows to read arbitrary file from the remote server.

// node_modules/626/index.js, line 15:

    var url = resolveUrl(req.url);
    var file = path.resolve(url);
    log(url + ': ' + file);

    fs.readFile(file, 'utf8', function (err, content) {
        if (err) {
            return res.end('error: file not found ' + file);
        }