Skip to content

Commit

Permalink
docs: update cve-2022-32190 (#4396)
Browse files Browse the repository at this point in the history
* docs: update cve-2022-32190

* docs: fixed go example

Co-authored-by: Adelina Simion <[email protected]>

---------

Co-authored-by: Adelina Simion <[email protected]>
  • Loading branch information
benradstone and addetz authored Oct 21, 2024
1 parent 8bfcdb7 commit 0856be1
Showing 1 changed file with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@ tags: ["security", "cve"]

## NIST CVE Summary

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example,
JoinPath("https://go.dev", "../go") returns the URL "https://go.dev/../go", despite the JoinPath documentation stating
that ../ path elements are removed from the result.
JoinPath and URL.JoinPath do not remove `../` path elements appended to a relative path. For example,
`JoinPath("https://go.dev", "../go")` returns the URL `https://go.dev/../go`, despite the JoinPath documentation stating
that `../` path elements are removed from the result.

## Our Official Summary

Expand Down

0 comments on commit 0856be1

Please sign in to comment.