tocsin

Debian/thumbor: unknown

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, file_loader decodes percent-encoded path segments after its root-boundary validation, allowing traversal outside FILE_LO

Action: Upgrade thumbor to 7.8.0-1 or later.

Affected

introducedfixedlast affected
07.8.0-1-

Fixed versions

7.8.0-1

Sources

published · modified · JSON