Skip to content
OpenAdvisories

Package · crates.io

rama

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Low 3.7
    GHSA-cwv4-h3j5-w3cf

    rama has Stored XSS in ServeDir HTML directory listing via unescaped file names and URI path

    Resolved: https://github.com/plabayo/rama/commit/89ddff578fd78bbebec99482d7030f28c07757a3 ## Summary `plabayo/rama` contains a stored/reflected cross-site scripting issue in the `ServeDir` HTML directory listing feature. When `ServeDir` is configured with `Di…

    rama crates.io