Alpine/uwsgi: high 7.5

uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal.

Action: Upgrade uwsgi to 2.0.17-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2018-7490#Alpine:v3.6/uwsgi
• https://security.alpinelinux.org/vuln/CVE-2018-7490

published 2018-02-26T22:29:00.697Z · modified 2026-10-23T17:23:43.622160131Z · JSON