AIKIDO-2025-10625
Akavache is vulnerable to Path Traversal
70
High Risk
This Affects:
AkavacheTL;DR
Affected versions of this package are vulnerable to Path Traversal due to improper neutralization of user-controlled input used in filesystem path construction. An attacker could supply a malicious filename containing traversal sequences (e.g., ../../../etc/passwd) to escape the intended directory and access, overwrite, or create arbitrary files on the server filesystem, potentially leading to unauthorized information disclosure or system compromise.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
Akavache is vulnerable to Path Traversal in versions 11.0.1 - 11.3.2.
How to fix this
Upgrade the Akavache library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant