Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/21 6:17 p.m.29 views

Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`)

The same as the hono core Path traversal in serve-static on Windows via encoded backslash %5C. Summary On Windows hosts, an encoded backslash %5C in the request path decodes to , which the Windows path resolver treats as a separator. serve-static then resolves a single URL segment such as...

5.4AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder