munin-monitoring vulnerabilities and threats

Munin versions 2.99.1 through 2.999.18 have a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request. This flaw allows unauthenticated attackers to bypass pathname restrictions and read files outside the intended static directory, including configuration files containing sensitive credentials.