Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

Path traversal in apimock-server's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

RUSTSEC-2026-0277 Path traversal in apimock-server's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

RUSTSEC-2026-0276 Path traversal in apimock's file-serving fallback

The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw .. segment could read any file readable by the process, returned with HTTP 200. Read-only...

me.geso.apimock:apimock-tomcat (>=0.0.1, <=0.6.1), org.apache.tomcat:tomcat-catalina-ant (7.0.56) +5 more potentially affected by CVE-2024-52316 via org.apache.tomcat:tomcat-catalina (7.0.56)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.56 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - me.geso.apimock:apimock-tomcat =0.0.1, =6.1.0.0-lithium, =6.1.4-lithium-sr4 Source cves:...