tocsin

Debian/libdancer2-perl: high 7.5

Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler. The handler joins the request path onto public_dir without c

Action: Upgrade libdancer2-perl to 2.2.2-1 or later.

Affected

introducedfixedlast affected
02.2.2-1-

Fixed versions

2.2.2-1

Sources

published · modified · JSON