crates.io/rama: low 3.7
rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path
Action: Upgrade rama to 0.3.0-rc.1 or later.
cargo update -p rama --precise 0.3.0-rc.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.0-rc.1 | - |
Fixed versions
| 0.3.0-rc.1 |
Sources
- osv: GHSA-cwv4-h3j5-w3cf
- https://github.com/plabayo/rama/security/advisories/GHSA-cwv4-h3j5-w3cf
- https://github.com/plabayo/rama/commit/89ddff578fd78bbebec99482d7030f28c07757a3
- https://github.com/plabayo/rama
published · modified · JSON