Description
In gin-vue-admin < 2.5.5, the download module has a Path Traversal vulnerability.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/flipped-aurora/gin-vue-admin | < 2.5.5 | 2.5.5 | GHSA-x623-hr8h-7g5v |
| Go | github.com/flipped-aurora/gin-vue-admin | < 2.5.5+incompatible | 2.5.5+incompatible | GO-2023-1560 |