Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization via case-sensitive matching of server-side route rules, where route rule protections such as redirect, headers, and proxy rules can be bypassed by an attacker who sends a request path with differing letter case...