Path Traversal

morepath is vulnerable to path traversal. It does correctly normalize dots in the request path as it relies on the client to do it...

Host Header Poisoning

morepath is vulnerable to host header poisoning. It does not validate the request host, allowing header poisoning attacks...