Skip to content
OpenAdvisories

Package · crates.io

apimock-server

1 known vulnerabilities.

1 result · Feed

  • Unscored —

    Path traversal in apimock's file-serving fallback

    The file-serving fallback joined a request-derived path onto the configured response directory and checked only that the result existed, never that it stayed inside that directory. A request containing a raw `..` segment could read any file readable by the pr…