Skip to content
Threat Feed

Product

Fast-Uri (<= 3.1.0)

1 brief RSS
high advisory

fast-uri Path Traversal Vulnerability via Percent-Encoded Dot Segments

fast-uri versions 3.1.0 and earlier are vulnerable to path traversal due to decoding percent-encoded path separators and dot segments before dot-segment removal, potentially leading to bypasses of path-based policy enforcement.

fast-uri path-traversal defense-evasion javascript
2r 1t 1c