New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump fasthttp from 1.6.0 to 1.34.0 #442

Closed

gpestana opened this issue May 20, 2022 · 1 comment

Labels

gpestana commented May 20, 2022 •

edited

From dependabot:

The package github.com/valyala/fasthttp before 1.34.0 is vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. Note: This security issue impacts Windows users only.

Related to #425

gpestana added the Type: Feature label

ghouscht mentioned this issue

Remove unnecessary dependency update while updating sentry SDK version #437

Closed

Contributor

YaroslavPodorvanov commented Aug 31, 2022

@gpestana solved in #464

cleptric closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment