AIKIDO-2025-10934
github.com/getfider/fider is vulnerable to Path Traversal
70
High Risk
This Affects:
github.com/getfider/fiderTL;DR
Affected versions of this package are vulnerable to Directory Traversal due to improper path sanitization in the getBlobByKey implementations. An attacker could exploit this vulnerability by crafting a request containing relative key (e.g., ../) to escape the intended serving directory. It could allow access to arbitrary files on the server's file system, potentially leading to the disclosure of sensitive information.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
github.com/getfider/fider is vulnerable to Path Traversal in versions 0.18.0 - 0.31.0.
How to fix this
Upgrade the github.com/getfider/fider library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant