| Package | Affected versions | Patched versions |
|---|---|---|
| glance | < 3.0.7 | 3.0.7 |
Versions of glance prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a --nodot option meant to hide files and directories with names that begin with a ., such as .git but fails to hide files inside a folder that begins with ..
Upgrade to version 3.0.7 or later.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free