PT-2026-137186

Name of the Vulnerable Software and Affected Versions Mongoose versions prior to 7.22 Description An issue exists in the mg path is sane function within src/util.c where the system reads path.buf1 without verifying that path.len is at least two bytes, and reads s2 when only two bytes remain...

PT-2022-17195

Name of the Vulnerable Software and Affected Versions cesanta/mongoose versions prior to 7.6 Description The issue is related to the unsafe handling of file names during upload using the mg http upload method, which may allow attackers to write files to arbitrary locations outside the designated...