Fasthttp Project vulnerabilities
We track 1 vulnerability in Fasthttp Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 17, 2022.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Fasthttp Project vulnerabilities
- 7.5 High severity
github.com/valyala/fasthttp: Improper Limitation of a Pathname to a Restricted Directory
The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue i