yegor256/takes

yegor256/takes

GitHubGitHub
GitHubgithub.com
www.takes.orgwww.takes.org
Releases158
Frequency3 weeks 4 days
Last Release
Stars874
True Object-Oriented Java Web Framework without NULLs, Static Methods, Annotations, and Mutable Objects
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-66905↗
7.5 HIGH—

The Takes web framework's TkFiles take thru 2.0-SNAPSHOT fails to canonicalize HTTP request paths before resolving them against the filesystem. A remote attacker can include ../ sequences in the request path to escape the configured base directory and read arbitrary files from the host system.