Description
All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | io.jooby:jooby and org.jooby:jooby | all versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.jooby:jooby | < 2.8.2 | 2.8.2 | GHSA-px9h-x66r-8mpc |
| Maven | org.jooby:jooby | < 2.8.2 | 2.8.2 | GHSA-px9h-x66r-8mpc |