Path Traversal

Http4s is vulnerable to a Path Traversal.The vulnerability is due to improper validation of URL path segments after percent-decoding, which allows an attacker to use encoded slash or backslash separators to traverse parent directories and access classpath or WebJar resources outside the configure...