GHSA-3227-R97M-8J95 Relative Path Traversal in afire serve_static
Impact This vulnerability effects the built-in afire servestatic extension allowing paths containing //.... to bypass the previous path sanitation and request files in higher directories that should not be accessible. Patches The issue has been fixed in afire 1.1.0. If you can, just update to the...