| Package | Affected versions | Patched versions |
|---|---|---|
| gopkg.in/macaron.v1 | < 1.3.7 | 1.3.7 |
| macaron | < 1.3.7 | 1.3.7 |
macaron before 1.3.7 has an open redirect in the static handler. Due to improper request santization, a specifically crafted URL can cause the static file handler to redirect to an attacker chosen URL, allowing for open redirect attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free