Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-23772
7.5
HIGHCVSS v3
Severity scale
010
Description
This affects all versions of package github.com/kataras/iris; all versions of package github.com/kataras/iris/v12. The unsafe handling of file names during upload using UploadFormFiles method may enable attackers to write to arbitrary locations outside the designated target folder.
kataras/iris
GitHubThe fastest HTTP/2 Go Web Framework. New, modern and easy to learn. Fast development with Code you control. Unbeatable cost-performance ratio :rocket:
GitHubThe fastest HTTP/2 Go Web Framework. New, modern and easy to learn. Fast development with Code you control. Unbeatable cost-performance ratio :rocket:<= 12.1.8, = 12.2.0NVD