Malicious code in @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer (npm)

The package @malware-test-afire-amass-hover-boxer/test-mlw3-afire-amass-hover-boxer was found to contain malicious code...

Malicious code in test-mlw2-afire-suber (npm)

The package test-mlw2-afire-suber was found to contain malicious code...

MAL-2025-34843 Malicious code in test-mlw2-afire-suber (npm)

The package test-mlw2-afire-suber was found to contain malicious code...

WS-2022-0120

This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible. The issue has been fixed in afire 1.1.0...

Relative Path Traversal in afire serve_static

Impact This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible. Patches The issue has been fixed in afire 1.1.0. If you can, just update to the...

afire_compress (>=0.1.0, <=0.1.1-alpha) potentially affected by unknown CVE via afire (0.3.0)

afire CARGO version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on afire and may be impacted: - afirecompress =0.1.0, =0.1.1-alpha Source cves: unknown CVE Source advisory: OSV:GHSA-3227-R97M-8J95...

PT-2022-28177

Name of the Vulnerable Software and Affected Versions afire versions prior to 1.1.0 Description This issue affects the built-in serve static extension in afire, allowing paths containing //.... to bypass previous path sanitation and request files in higher directories that should not be accessibl...

Relative Path Traversal in afire serve_static

This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible...