🛡️ GHSA-7p7c-pvvx-2vx3 — hyper-staticfile

Weakness class

GHSA-7p7c-pvvx-2vx3 is classified as CWE-22: Path Traversal. A file path built from user input is not confined to the intended directory, letting an attacker reach files elsewhere on the filesystem.

Affected software

GHSA-7p7c-pvvx-2vx3 is recorded against 1 package.

• hyper-staticfile

Timeline and source

Published on 5 December 2022 and last revised on 8 November 2023. No public exploit is currently recorded for this entry. Record sourced from OSV.

References

github.com (Web)
github.com (Web)
github.com (Web)
github.com (Package)
rustsec.org (Web)

Other advisories for this package

hyper-staticfile has other advisories on record. If you are patching this one, these are worth checking on the same host:

• GHSA-5wvv-q5fv-2388 (published 30 Dec 2022)
• RUSTSEC-2022-0072 (published 23 Dec 2022)
• RUSTSEC-2022-0069 (published 30 Nov 2022)

Same weakness in other software

These advisories are the same class of weakness (CWE-22: Path Traversal) in other software:

• CVE-2016-1000305 (published 31 Jul 2026)
• CVE-2022-47951 (5.7 Medium, published 13 Jul 2026)
• CVE-2022-39210 (5.0 Medium, published 12 Jul 2026)
• CVE-2023-23608 (0.0 Low, published 7 Jul 2026)
• CVE-2024-1483 (8.0 High, published 7 Jul 2026)
• CVE-2023-52288 (8.0 High, published 7 Jul 2026)
• CVE-2023-41057 (2.0 Low, published 7 Jul 2026)
• CVE-2023-0241 (6.5 Medium, published 7 Jul 2026)

Details

Affected Packages

References