External input constructs a pathname that escapes the intended directory via sequences like ../.
Canonicalize paths before validation and reject any resolved path outside the intended root.
MITRE ATT&CK techniques associated with this weakness class (mapped via MITRE CAPEC). A vulnerability of this type could let an adversary carry out:
Security vulnerability in postcss
Security vulnerability in postcss
Security vulnerability in rollup
Security vulnerability in rollup
Security vulnerability in postcss
Security vulnerability in ruby
Security vulnerability in ruby
Security vulnerability in ruby
Security vulnerability in ruby
Security vulnerability in fast-uri
Security vulnerability in postcss
Security vulnerability in postcss
Security vulnerability in postcss
Security vulnerability in postcss
Security vulnerability in vite
Security vulnerability in vite
Security vulnerability in postcss
Security vulnerability in vite
Security vulnerability in rollup
Security vulnerability in vite
Security vulnerability in font