CVE-2026-93712

The Dancer2 framework (versions 2.1.0 before 2.2.0 ) for Perl is vulnerable to a directory traversal flaw in the File route handler . The handler fails to collapse relative path segments, allowing an unauthenticated request to escape the public_dir using sequences like /../outside.txt or percent-...