[serve] Directory listing and File access even when they have been set to be ignored (using dot-slash)

I would like to report a vulnerability in **serve**. It allows listing directory and reading local files on the target server.

const serve = require('serve')
const server = serve(__dirname, {
      port: 6060,
      ignore: ['dir/secret.txt', 'dir/dir2']
})