CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Résumé
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to version 4.2.7, when using serveStatic with deno, it is possible to traverse the directory where main.ts is located. This can result in retrieval of unexpected files. Version 4.2.7 contains a patch for the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com