Skip to content
OpenAdvisories

Package · Go

github.com/valyala/fasthttp

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Unscored —
    GO-2026-4950

    Authorization bypass via double-encoded paths in github.com/valyala/fasthttp

    In github.com/valyala/fasthttp before 1.70.0, ServeFile and ServeFS reinterpret filesystem paths as URIs, decoding percent-encoded sequences and treating characters like '?' and '#' as URI delimiters. In applications where authorization guards inspect ctx.Pat…

    github.com/valyala/fasthttp Go
  • Medium 5.9
    CVE-2022-21221

    Directory Traversal

    The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue …

    github.com/valyala/fasthttp Go