| Package | Affected versions | Patched versions |
|---|---|---|
| pathtools | ≤ 3.61 |
The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free