CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Summary
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Original description
The description as published by the source.
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where main.ts is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com