AIKIDO-2025-10245

TL;DR

Affected versions of this package are vulnerable to path traversal due to insufficient request path sanitization, as it fails to remove rogue dots or slashes properly from URLs. This flaw could allow attackers to bypass security controls by crafting malicious URLs with path traversal sequences (e.g., /../), potentially accessing restricted directories or files outside the intended web root, leading to unauthorized data exposure or server compromise.