Improper Input Validation

joomla/input is vulnerable to improper input validation. The vulnerability is due to JInput polluting method-specific input bags with $REQUEST data under specific circumstances, which allows an attacker to manipulate request input handling and potentially bypass intended input restrictions...

GHSA-PPPV-CH8P-RP2W lite-dev-server vulnerable to Directory Traversal

All versions of package lite-dev-server are vulnerable to Directory Traversal due to missing input sanitization and sandboxes being employed to the req.url user input that is passed to the server code...