Threats tagged 'ghsa-r5jh-q2mw-gcx4'

A lexical path validation flaw in the SanitizeFilePath function of github.com/fission/fission allowed sibling-directory escape due to improper use of strings.HasPrefix without enforcing path-separator boundaries. This permitted tenants controlling sibling directories to read or write outside intended safe directories. The issue affected all versions through v1.24.0 and was fixed in v1.25.0 by replacing SanitizeFilePath with kernel-enforced directory confinement helpers.