CVE-2026-93712: Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler
Dancer2 before 2.2.0 can serve files outside public_dir via relative path segments.
1 stories, newest first · one card per story
Dancer2 before 2.2.0 can serve files outside public_dir via relative path segments.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views