GHSA-m63q-4hr8-5r5h

GitHub Security Advisory

Solon Vulnerable to Directory Traversal

✓ GitHub Reviewed MODERATE Has CVE

Directory Traversal vulnerability in solon v.3.1.2 allows a remote attacker to conduct XSS attacks via the solon-faas-luffy component

Maven org.noear:solon-faas-luffy

Affected versions: 3.1.2 (fixed in 3.2.0)

CVE-2025-46096

GHSA ID

GHSA-m63q-4hr8-5r5h

Published

June 13, 2025 3:30 PM

Last Modified

June 13, 2025 10:17 PM

CVSS Score

5.0 /10

Primary Ecosystem

Maven

Primary Package

org.noear:solon-faas-luffy

GitHub Reviewed

✓ Yes

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.