Skip to content
OpenAdvisories

Package · Go

goyave.dev/goyave/v5

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Unscored —
    GO-2024-3293

    Full access to the host's OS file system using osfs.FS with Router.Static in goyave.dev/goyave/v5

    Static file serving using router.Static and osfs.FS allows clients to access any file on the host file system using relative paths because the requested path is not sanitized and . and .. segments are accepted. The files will be returned as a response, provid…

    goyave.dev/goyave/v5 Go