crates.io/afire: high
Relative Path Traversal in afire serve_static
Action: Upgrade afire to 1.1.0 or later.
cargo update -p afire --precise 1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.2.1 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-3227-r97m-8j95
- https://github.com/Basicprogrammer10/afire/security/advisories/GHSA-3227-r97m-8j95
- https://github.com/Basicprogrammer10/afire/commit/da7904c04f82e1cb43cc42eaf6a1dba072b5c921
- https://github.com/Basicprogrammer10/afire
- https://github.com/Basicprogrammer10/afire/releases/tag/v1.1.0
published · modified · JSON