← Back

Fasthttp

fasthttp

Vendor: Fasthttp Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-21221
1Fasthttp Project
1Fasthttp
Jun 17, 2026
Mar 17, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in t...Show more
The package github.com/valyala/fasthttp before 1.34.0 are vulnerable to Directory Traversal via the ServeFile function, due to improper sanitization. It is possible to be exploited by using a backslash %5c character in the path. **Note:** This security issue impacts Windows users only.Show less